PackedProof.pad_choose_correct: law of bend-collections@1.0.0.0
Import: import bend-collections@1.0.0.0/proofs/crypto/sha/packed/packed_proof.bend as PackedProof
Lines 344-348 of bend-collections@1.0.0.0/proofs/crypto/sha/packed/packed_proof.bend: https://jend.leeeet.dev/read.txt?path=bend-collections@1.0.0.0/proofs/crypto/sha/packed/packed_proof.bend&start_line=344&end_line=348

import Base
import bend-collections@1.0.0.0/src/crypto/sha/packed/packed.bend as P
import bend-collections@1.0.0.0/spec/crypto/sha/packed.bend as R

law pad_choose_correct:
  for +c: Cmp
  for +w: U32
  for +delta: Nat
  {P.pad_choose(c,w,delta) == R.pad_choose(c,w,delta) : U32}

Uses (6):
  https://jend.leeeet.dev/definition.txt?path=Base/base.bend&name=Cmp
  https://jend.leeeet.dev/definition.txt?path=Base/base.bend&name=Nat
  https://jend.leeeet.dev/definition.txt?path=Base/base.bend&name=U32
  https://jend.leeeet.dev/definition.txt?path=bend-collections@1.0.0.0/proofs/crypto/sha/packed/packed_proof.bend&name=partial_correct
  https://jend.leeeet.dev/definition.txt?path=bend-collections@1.0.0.0/spec/crypto/sha/packed.bend&name=pad_choose
  https://jend.leeeet.dev/definition.txt?path=bend-collections@1.0.0.0/src/crypto/sha/packed/packed.bend&name=pad_choose