law round2_correct
bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/blake/blake2s/compress.bend:154
import bend-collections-laws-crypto@1.0.0.0/proofs/crypto/blake/blake2s/compress.bend as Compress
import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/blake/blake2s/types.bend as T
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/blake/blake2s.bend as R
154law round2_correct:
155 for +v: T.Vector
156 for +m0: U32
157 for +m1: U32
158 for +m2: U32
159 for +m3: U32
160 for +m4: U32
161 for +m5: U32
162 for +m6: U32
163 for +m7: U32
164 for +m8: U32
165 for +m9: U32
166 for +m10: U32
167 for +m11: U32
168 for +m12: U32
169 for +m13: U32
170 for +m14: U32
171 for +m15: U32
172 {vec(round_at(2n,v,m0,m1,m2,m3,m4,m5,m6,m7,m8,m9,m10,m11,m12,m13,m14,m15)) == R.round(vec(v),R.sigma(2n),[m0,m1,m2,m3,m4,m5,m6,m7,m8,m9,m10,m11,m12,m13,m14,m15]) : List<&2,U32>}