def mask_eq

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/curve25519/xbits.bend:233

import Base
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/curve25519/x25519.bend as S
import bend-collections-laws-crypto@1.0.0.0/src/crypto/curve25519/field.bend as F

233def mask_eq(+xs: List<&2, U32>) -> {F.mask_top(xs) == S.mask_last(xs) : List<&2, U32>}:
234  match xs:
235    case Nil{}:
236      {==}
237    case Con{+x, +xt}:
238      match xt:
239        case Nil{}:
240          {==}
241        case Con{+y, +yt}:
242          Equal.cong(List<&2, U32>, List<&2, U32>, z => Con{x, z}, F.mask_top(Con{y, yt}), S.mask_last(Con{y, yt}), mask_eq(Con{y, yt}))