law pad3_correct

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/keccak/sponge.bend:2172

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/keccak/types.bend as T
import bend-collections-laws-crypto@1.0.0.0/src/crypto/keccak/keccak.bend as K
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/keccak/main.bend as R

2172law pad3_correct:
2173  for +r: Nat
2174  for +remain: Nat
2175  for +index: U32
2176  for +s: T.State
2177  for +w0: U32
2178  for +w1: U32
2179  for +w2: U32
2180  for pair: Array<U32> & U32
2181  {K.pad3(r,remain,index,s,w0,w1,w2,pair) == Pair.snd(Array<U32>,T.State,R.gather(r,30n,index,4,True{},remain,s,[w2,w1,w0],pair)) : T.State}