law mac_correct

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/poly1305/mac.bend:344

import Base
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/poly1305.bend as R
import bend-collections-laws-crypto@1.0.0.0/src/crypto/poly1305/poly1305.bend as P

344# The implementation's tag is the RFC 8439 tag, for every key and message.
345law mac_correct:
346  for +key: List<&2, U32>
347  for +msg: List<&2, U32>
348  {P.mac(key, msg) == R.mac(key, msg) : List<&2, U32>}