law pad25_correct

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/keccak/sponge.bend:1589

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/keccak/types.bend as T
import bend-collections-laws-crypto@1.0.0.0/src/crypto/keccak/keccak.bend as K
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/keccak/main.bend as R

1589law pad25_correct:
1590  for +r: Nat
1591  for +remain: Nat
1592  for +index: U32
1593  for +s: T.State
1594  for +w0: U32
1595  for +w1: U32
1596  for +w2: U32
1597  for +w3: U32
1598  for +w4: U32
1599  for +w5: U32
1600  for +w6: U32
1601  for +w7: U32
1602  for +w8: U32
1603  for +w9: U32
1604  for +w10: U32
1605  for +w11: U32
1606  for +w12: U32
1607  for +w13: U32
1608  for +w14: U32
1609  for +w15: U32
1610  for +w16: U32
1611  for +w17: U32
1612  for +w18: U32
1613  for +w19: U32
1614  for +w20: U32
1615  for +w21: U32
1616  for +w22: U32
1617  for +w23: U32
1618  for +w24: U32
1619  for pair: Array<U32> & U32
1620  {K.pad25(r,remain,index,s,w0,w1,w2,w3,w4,w5,w6,w7,w8,w9,w10,w11,w12,w13,w14,w15,w16,w17,w18,w19,w20,w21,w22,w23,w24,pair) == Pair.snd(Array<U32>,T.State,R.gather(r,8n,index,26,True{},remain,s,[w24,w23,w22,w21,w20,w19,w18,w17,w16,w15,w14,w13,w12,w11,w10,w9,w8,w7,w6,w5,w4,w3,w2,w1,w0],pair)) : T.State}