law pad6_correct

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/keccak/sponge.bend:2121

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/keccak/types.bend as T
import bend-collections-laws-crypto@1.0.0.0/src/crypto/keccak/keccak.bend as K
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/keccak/main.bend as R

2121law pad6_correct:
2122  for +r: Nat
2123  for +remain: Nat
2124  for +index: U32
2125  for +s: T.State
2126  for +w0: U32
2127  for +w1: U32
2128  for +w2: U32
2129  for +w3: U32
2130  for +w4: U32
2131  for +w5: U32
2132  for pair: Array<U32> & U32
2133  {K.pad6(r,remain,index,s,w0,w1,w2,w3,w4,w5,pair) == Pair.snd(Array<U32>,T.State,R.gather(r,27n,index,7,True{},remain,s,[w5,w4,w3,w2,w1,w0],pair)) : T.State}