law pad15_correct
bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/blake/blake2s/reads.bend:438
import bend-collections-laws-crypto@1.0.0.0/proofs/crypto/blake/blake2s/reads.bend as Reads
import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/blake/blake2s/types.bend as T
import bend-collections-laws-crypto@1.0.0.0/src/crypto/blake/blake2s/blake2s.bend as K
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/blake/blake2s.bend as R
438law pad15_correct:
439 for +remain: Nat
440 for +index: U32
441 for +h: T.State
442 for +t0: U32
443 for +t1: U32
444 for +u1: U32
445 for e: {t1 == u1 : U32}
446 for +w0: U32
447 for +w1: U32
448 for +w2: U32
449 for +w3: U32
450 for +w4: U32
451 for +w5: U32
452 for +w6: U32
453 for +w7: U32
454 for +w8: U32
455 for +w9: U32
456 for +w10: U32
457 for +w11: U32
458 for +w12: U32
459 for +w13: U32
460 for +w14: U32
461 for pair: Array<U32> & U32
462 {K.pad15(remain,index,h,t0,t1,w0,w1,w2,w3,w4,w5,w6,w7,w8,w9,w10,w11,w12,w13,w14,pair) == R.last_block(10n,R.gather(0n,index,16,[w14,w13,w12,w11,w10,w9,w8,w7,w6,w5,w4,w3,w2,w1,w0],pair),remain,h,t0,u1) : T.State}