law compress

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/blake/blake2s/laws.bend:15

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/blake/blake2s/types.bend as T
import bend-collections-laws-crypto@1.0.0.0/src/crypto/blake/blake2s/compress.bend as C
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/blake/blake2s.bend as R

15# The unrolled compression function is F with r = 10 rounds, for every
16# chaining value, message block, counter and final-block flag.
17law compress:
18  for +h: T.State
19  for +m0: U32
20  for +m1: U32
21  for +m2: U32
22  for +m3: U32
23  for +m4: U32
24  for +m5: U32
25  for +m6: U32
26  for +m7: U32
27  for +m8: U32
28  for +m9: U32
29  for +m10: U32
30  for +m11: U32
31  for +m12: U32
32  for +m13: U32
33  for +m14: U32
34  for +m15: U32
35  for +t0: U32
36  for +t1: U32
37  for +last: Bool
38  {C.compress(h,m0,m1,m2,m3,m4,m5,m6,m7,m8,m9,m10,m11,m12,m13,m14,m15,t0,t1,last) == R.compress(10n,h,[m0,m1,m2,m3,m4,m5,m6,m7,m8,m9,m10,m11,m12,m13,m14,m15],t0,t1,last) : T.State}