law pad18_correct

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/keccak/sponge.bend:1827

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/keccak/types.bend as T
import bend-collections-laws-crypto@1.0.0.0/src/crypto/keccak/keccak.bend as K
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/keccak/main.bend as R

1827law pad18_correct:
1828  for +r: Nat
1829  for +remain: Nat
1830  for +index: U32
1831  for +s: T.State
1832  for +w0: U32
1833  for +w1: U32
1834  for +w2: U32
1835  for +w3: U32
1836  for +w4: U32
1837  for +w5: U32
1838  for +w6: U32
1839  for +w7: U32
1840  for +w8: U32
1841  for +w9: U32
1842  for +w10: U32
1843  for +w11: U32
1844  for +w12: U32
1845  for +w13: U32
1846  for +w14: U32
1847  for +w15: U32
1848  for +w16: U32
1849  for +w17: U32
1850  for pair: Array<U32> & U32
1851  {K.pad18(r,remain,index,s,w0,w1,w2,w3,w4,w5,w6,w7,w8,w9,w10,w11,w12,w13,w14,w15,w16,w17,pair) == Pair.snd(Array<U32>,T.State,R.gather(r,15n,index,19,True{},remain,s,[w17,w16,w15,w14,w13,w12,w11,w10,w9,w8,w7,w6,w5,w4,w3,w2,w1,w0],pair)) : T.State}