law Api128.bad_nonce

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/aes/laws.bend:302

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/aesgcm.bend as GCM

302# A nonce other than 12 bytes is rejected.
303law Api128.bad_nonce:
304  for +key: List<&2, U32>
305  for +nonce: List<&2, U32>
306  for +h: {Nat.is_eq(List.length(&2, U32, nonce), 12n) == False{} : Bool}
307  for +aad: List<&2, U32>
308  for +pt: List<&2, U32>
309  {GCM.aes128_gcm_encrypt(key, nonce, aad, pt) == None{} : Maybe<&2, List<&2, U32>>}