def Rst

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/curve25519/ladder.bend:32

import Base
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/curve25519/x25519.bend as S
import bend-collections-laws-crypto@1.0.0.0/src/crypto/curve25519/x25519.bend as X
import bend-collections-laws-crypto@1.0.0.0/proofs/crypto/curve25519/rel.bend as RL

32def Rst(+pp: Nat, st: X.St, sst: S.LSt) -> Data:
33  match st sst:
34    case X.St{x2, z2, x3, z3, sw} S.LSt{a2, b2, a3, b3, sws}:
35      DP(RL.R(pp, x2, a2), DP(RL.R(pp, z2, b2), DP(RL.R(pp, x3, a3), DP(RL.R(pp, z3, b3), DP({U32.to_nat(sw) == sws : Nat}, {Nat.is_le(sws, 1n) == True{} : Bool})))))