law keystream_correct

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/chacha/stream.bend:127

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/chacha/chacha20.bend as I
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/chacha.bend as R

127law keystream_correct:
128  for +r: Nat
129  for +kb: List<&2, U32>
130  for +c: U32
131  for +nb: List<&2, U32>
132  {I.keystream(r, I.key(kb), c, I.nonce(nb)) == R.block_rounds(r, kb, c, nb) : List<&2, U32>}