law Api128.bad_nonce_open

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/aes/laws.bend:311

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/aesgcm.bend as GCM

311law Api128.bad_nonce_open:
312  for +key: List<&2, U32>
313  for +nonce: List<&2, U32>
314  for +h: {Nat.is_eq(List.length(&2, U32, nonce), 12n) == False{} : Bool}
315  for +aad: List<&2, U32>
316  for +ct: List<&2, U32>
317  {GCM.aes128_gcm_decrypt(key, nonce, aad, ct) == None{} : Maybe<&2, List<&2, U32>>}