law pad23_correct

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/keccak/sponge.bend:1662

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/keccak/types.bend as T
import bend-collections-laws-crypto@1.0.0.0/src/crypto/keccak/keccak.bend as K
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/keccak/main.bend as R

1662law pad23_correct:
1663  for +r: Nat
1664  for +remain: Nat
1665  for +index: U32
1666  for +s: T.State
1667  for +w0: U32
1668  for +w1: U32
1669  for +w2: U32
1670  for +w3: U32
1671  for +w4: U32
1672  for +w5: U32
1673  for +w6: U32
1674  for +w7: U32
1675  for +w8: U32
1676  for +w9: U32
1677  for +w10: U32
1678  for +w11: U32
1679  for +w12: U32
1680  for +w13: U32
1681  for +w14: U32
1682  for +w15: U32
1683  for +w16: U32
1684  for +w17: U32
1685  for +w18: U32
1686  for +w19: U32
1687  for +w20: U32
1688  for +w21: U32
1689  for +w22: U32
1690  for pair: Array<U32> & U32
1691  {K.pad23(r,remain,index,s,w0,w1,w2,w3,w4,w5,w6,w7,w8,w9,w10,w11,w12,w13,w14,w15,w16,w17,w18,w19,w20,w21,w22,pair) == Pair.snd(Array<U32>,T.State,R.gather(r,10n,index,24,True{},remain,s,[w22,w21,w20,w19,w18,w17,w16,w15,w14,w13,w12,w11,w10,w9,w8,w7,w6,w5,w4,w3,w2,w1,w0],pair)) : T.State}