law aes128_decrypt_l
bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/aes/api.bend:297
import bend-collections-laws-crypto@1.0.0.0/proofs/crypto/aes/api.bend as Api
import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/aesgcm.bend as GCM
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/aes/gcm.bend as G
297law aes128_decrypt_l:
298 for +key: List<&2, U32>
299 for +h: {List.length(&2, U32, key) == 16n : Nat}
300 for +nonce: List<&2, U32>
301 for +hn: {List.length(&2, U32, nonce) == 12n : Nat}
302 for +aad: List<&2, U32>
303 for +ct: List<&2, U32>
304 {GCM.aes128_gcm_decrypt(key, nonce, aad, ct) == G.aes_open(key, nonce, aad, ct) : Maybe<&2, List<&2, U32>>}