law model_correct

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/blake/blake2s/compress.bend:452

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/blake/blake2s/types.bend as T
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/blake/blake2s.bend as R

452law model_correct:
453  for +r: Nat
454  for +h: T.State
455  for +m0: U32
456  for +m1: U32
457  for +m2: U32
458  for +m3: U32
459  for +m4: U32
460  for +m5: U32
461  for +m6: U32
462  for +m7: U32
463  for +m8: U32
464  for +m9: U32
465  for +m10: U32
466  for +m11: U32
467  for +m12: U32
468  for +m13: U32
469  for +m14: U32
470  for +m15: U32
471  for +t0: U32
472  for +t1: U32
473  for +last: Bool
474  {model(r,h,m0,m1,m2,m3,m4,m5,m6,m7,m8,m9,m10,m11,m12,m13,m14,m15,t0,t1,last) == R.compress(r,h,[m0,m1,m2,m3,m4,m5,m6,m7,m8,m9,m10,m11,m12,m13,m14,m15],t0,t1,last) : T.State}