law pad7_correct

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/blake/blake2s/reads.bend:650

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/blake/blake2s/types.bend as T
import bend-collections-laws-crypto@1.0.0.0/src/crypto/blake/blake2s/blake2s.bend as K
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/blake/blake2s.bend as R

650law pad7_correct:
651  for +remain: Nat
652  for +index: U32
653  for +h: T.State
654  for +t0: U32
655  for +t1: U32
656  for +u1: U32
657  for e: {t1 == u1 : U32}
658  for +w0: U32
659  for +w1: U32
660  for +w2: U32
661  for +w3: U32
662  for +w4: U32
663  for +w5: U32
664  for +w6: U32
665  for pair: Array<U32> & U32
666  {K.pad7(remain,index,h,t0,t1,w0,w1,w2,w3,w4,w5,w6,pair) == R.last_block(10n,R.gather(8n,index,8,[w6,w5,w4,w3,w2,w1,w0],pair),remain,h,t0,u1) : T.State}