law hlt

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/poly1305/final.bend:219

import Base
import bend-collections-laws-crypto@1.0.0.0/spec/lib/common.bend as C
import bend-collections-laws-crypto@1.0.0.0/proofs/crypto/poly1305/value.bend as V
import bend-collections-laws-crypto@1.0.0.0/proofs/crypto/poly1305/step.bend as ST

219# ev(h) < 2^128 + 2^130
220law hlt:
221  for +one: Nat
222  for +h1: {one == 1n : Nat}
223  for +h: List<&2, U32>
224  for +hh: {ST.inv(h) == True{} : Bool}
225  {Nat.is_lt(V.ev(h), Nat.add(V.pos(16n, one), C.shift(130n, one))) == True{} : Bool}