law verify_rejects

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/poly1305/laws.bend:50

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/poly1305/poly1305.bend as P
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/poly1305.bend as R

50# ... and rejects every other tag.
51law verify_rejects:
52  for +key: List<&2, U32>
53  for +msg: List<&2, U32>
54  for +tag: List<&2, U32>
55  for h: {tag != R.mac(key, msg) : List<&2, U32>}
56  {P.verify(key, msg, tag) == False{} : Bool}