law layout_cp

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/aead/proof.bend:261

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/aead.bend as A
import bend-collections-laws-crypto@1.0.0.0/src/crypto/aead/chacha20poly1305.bend as CP
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/chacha20poly1305.bend as R

261law layout_cp:
262  for +key: List<&2, U32>
263  for +nonce: List<&2, U32>
264  for +aad: List<&2, U32>
265  for +pt: List<&2, U32>
266  {A.seal(A.CHACHA20_POLY1305{}, key, nonce, aad, pt) == sapp(CP.encrypt_ct(key, nonce, pt), R.tag(key, nonce, aad, CP.encrypt_ct(key, nonce, pt))) : Maybe<&2, List<&2, U32>>}