def gct
import bend-collections-laws-crypto@1.0.0.0/proofs/crypto/aead/proof.bend as Proofimport Base
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/aes/aes.bend as S
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/aes/gcm.bend as G
289def gct(+key: List<&2, U32>, +nonce: List<&2, U32>, +pt: List<&2, U32>) -> List<&2, U32>:
290 G.gctr(S.nk(key), S.nr(key), key, pt, G.inc32(G.j0(nonce)))