law r_ev

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/poly1305/mac.bend:152

import Base
import bend-collections-laws-crypto@1.0.0.0/spec/crypto/poly1305.bend as R
import bend-collections-laws-crypto@1.0.0.0/src/crypto/poly1305/poly1305.bend as P
import bend-collections-laws-crypto@1.0.0.0/proofs/crypto/poly1305/value.bend as V

152# the key's r and s limbs
153law r_ev:
154  for +key: List<&2, U32>
155  {V.ev(P.r_key(key)) == R.le_num(R.clamp(R.prefix(16n, key))) : Nat}