law compress_last_correct

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/blake/blake2b/laws.bend:54

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/blake/blake2b/types.bend as T
import bend-collections-laws-crypto@1.0.0.0/src/crypto/blake/blake2b/compress.bend as F
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/blake/blake2b.bend as S

54# The compression function F on the last block, for every chaining value h,
55# counter t and message block.
56law compress_last_correct:
57  for +h: T.Chain
58  for +t: T.Counter
59  for +w0: U32
60  for +w1: U32
61  for +w2: U32
62  for +w3: U32
63  for +w4: U32
64  for +w5: U32
65  for +w6: U32
66  for +w7: U32
67  for +w8: U32
68  for +w9: U32
69  for +w10: U32
70  for +w11: U32
71  for +w12: U32
72  for +w13: U32
73  for +w14: U32
74  for +w15: U32
75  for +w16: U32
76  for +w17: U32
77  for +w18: U32
78  for +w19: U32
79  for +w20: U32
80  for +w21: U32
81  for +w22: U32
82  for +w23: U32
83  for +w24: U32
84  for +w25: U32
85  for +w26: U32
86  for +w27: U32
87  for +w28: U32
88  for +w29: U32
89  for +w30: U32
90  for +w31: U32
91  {F.compress_last(h,t,w0,w1,w2,w3,w4,w5,w6,w7,w8,w9,w10,w11,w12,w13,w14,w15,w16,w17,w18,w19,w20,w21,w22,w23,w24,w25,w26,w27,w28,w29,w30,w31) == S.compress(h,[T.W{w0,w1},T.W{w2,w3},T.W{w4,w5},T.W{w6,w7},T.W{w8,w9},T.W{w10,w11},T.W{w12,w13},T.W{w14,w15},T.W{w16,w17},T.W{w18,w19},T.W{w20,w21},T.W{w22,w23},T.W{w24,w25},T.W{w26,w27},T.W{w28,w29},T.W{w30,w31}],t,True{}) : T.Chain}