AESEncryptProof.output_nonce: def of qasim-bend-kit@0.1.0.2
Import: import qasim-bend-kit@0.1.0.2/proof/AES_EncryptProof.bend as AESEncryptProof
Lines 412-419 of qasim-bend-kit@0.1.0.2/proof/AES_EncryptProof.bend: https://jend.leeeet.dev/read.txt?path=qasim-bend-kit@0.1.0.2/proof/AES_EncryptProof.bend&start_line=412&end_line=419

import Base
import qasim-bend-kit@0.1.0.2/libs/AES256GCM.bend as AES
import qasim-bend-kit@0.1.0.2/libs/AES256GCMCore.bend as Core

def output_nonce(+nonce: AES.Nonce, +output: Core.GcmOutput) ->
    {result_nonce(nonce, AES.encrypt_output_from_gcm(nonce, output)) ==
     nonce : AES.Nonce}:
    match output:
        case Core.GcmOutput{+ciphertext, ciphertext_valid,
            tag_bytes, tag_valid, tag_size, tag_words, tag_nonce, tag_aad,
            tag_matches}:
            {==}

Uses (4):
  https://jend.leeeet.dev/definition.txt?path=qasim-bend-kit@0.1.0.2/libs/AES256GCM.bend&name=Nonce
  https://jend.leeeet.dev/definition.txt?path=qasim-bend-kit@0.1.0.2/libs/AES256GCM.bend&name=encrypt_output_from_gcm
  https://jend.leeeet.dev/definition.txt?path=qasim-bend-kit@0.1.0.2/libs/AES256GCMCore.bend&name=GcmOutput
  https://jend.leeeet.dev/definition.txt?path=qasim-bend-kit@0.1.0.2/proof/AES_EncryptProof.bend&name=result_nonce