law pad17_correct

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/keccak/sponge.bend:1857

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/keccak/types.bend as T
import bend-collections-laws-crypto@1.0.0.0/src/crypto/keccak/keccak.bend as K
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/keccak/main.bend as R

1857law pad17_correct:
1858  for +r: Nat
1859  for +remain: Nat
1860  for +index: U32
1861  for +s: T.State
1862  for +w0: U32
1863  for +w1: U32
1864  for +w2: U32
1865  for +w3: U32
1866  for +w4: U32
1867  for +w5: U32
1868  for +w6: U32
1869  for +w7: U32
1870  for +w8: U32
1871  for +w9: U32
1872  for +w10: U32
1873  for +w11: U32
1874  for +w12: U32
1875  for +w13: U32
1876  for +w14: U32
1877  for +w15: U32
1878  for +w16: U32
1879  for pair: Array<U32> & U32
1880  {K.pad17(r,remain,index,s,w0,w1,w2,w3,w4,w5,w6,w7,w8,w9,w10,w11,w12,w13,w14,w15,w16,pair) == Pair.snd(Array<U32>,T.State,R.gather(r,16n,index,18,True{},remain,s,[w16,w15,w14,w13,w12,w11,w10,w9,w8,w7,w6,w5,w4,w3,w2,w1,w0],pair)) : T.State}