def hprime_len
import bend-collections-laws-crypto@1.0.0.0/proofs/crypto/argon2/password.bend as Passwordimport Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/argon2/argon2.bend as A2
128# H'^T has T bytes.
129def hprime_len(+tl: Nat, +a: List<&2, U32>) -> {len(A2.hprime(tl, a)) == tl : Nat}:
130 pick_len(tl, A2.cat(A2.le32(tl), a), Nat.is_le(tl, 64n), {==})