law Api256.bad_nonce_open

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/aes/laws.bend:442

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/aesgcm.bend as GCM

442law Api256.bad_nonce_open:
443  for +key: List<&2, U32>
444  for +nonce: List<&2, U32>
445  for +h: {Nat.is_eq(List.length(&2, U32, nonce), 12n) == False{} : Bool}
446  for +aad: List<&2, U32>
447  for +ct: List<&2, U32>
448  {GCM.aes256_gcm_decrypt(key, nonce, aad, ct) == None{} : Maybe<&2, List<&2, U32>>}