def bb

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/poly1305/final.bend:255

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/poly1305/limbs.bend as Li

255def bb(+h: List<&2, U32>) -> U32:
256  U32.shrn(Li.hd0(Li.skip(16n, gg(h))), 2n)