law mac_length
import bend-collections-laws-crypto@1.0.0.0/proofs/crypto/poly1305/mac.bend as Macimport Base
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/poly1305.bend as R
365# The tag has 16 bytes.
366law mac_length:
367 for +key: List<&2, U32>
368 for +msg: List<&2, U32>
369 {List.length(&2, U32, R.mac(key, msg)) == 16n : Nat}