law pad31_correct

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/keccak/sponge.bend:1346

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/keccak/types.bend as T
import bend-collections-laws-crypto@1.0.0.0/src/crypto/keccak/keccak.bend as K
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/keccak/main.bend as R

1346law pad31_correct:
1347  for +r: Nat
1348  for +remain: Nat
1349  for +index: U32
1350  for +s: T.State
1351  for +w0: U32
1352  for +w1: U32
1353  for +w2: U32
1354  for +w3: U32
1355  for +w4: U32
1356  for +w5: U32
1357  for +w6: U32
1358  for +w7: U32
1359  for +w8: U32
1360  for +w9: U32
1361  for +w10: U32
1362  for +w11: U32
1363  for +w12: U32
1364  for +w13: U32
1365  for +w14: U32
1366  for +w15: U32
1367  for +w16: U32
1368  for +w17: U32
1369  for +w18: U32
1370  for +w19: U32
1371  for +w20: U32
1372  for +w21: U32
1373  for +w22: U32
1374  for +w23: U32
1375  for +w24: U32
1376  for +w25: U32
1377  for +w26: U32
1378  for +w27: U32
1379  for +w28: U32
1380  for +w29: U32
1381  for +w30: U32
1382  for pair: Array<U32> & U32
1383  {K.pad31(r,remain,index,s,w0,w1,w2,w3,w4,w5,w6,w7,w8,w9,w10,w11,w12,w13,w14,w15,w16,w17,w18,w19,w20,w21,w22,w23,w24,w25,w26,w27,w28,w29,w30,pair) == Pair.snd(Array<U32>,T.State,R.gather(r,2n,index,32,True{},remain,s,[w30,w29,w28,w27,w26,w25,w24,w23,w22,w21,w20,w19,w18,w17,w16,w15,w14,w13,w12,w11,w10,w9,w8,w7,w6,w5,w4,w3,w2,w1,w0],pair)) : T.State}