law kr59_correct

bend-collections-laws-crypto@1.0.0.0 · proofs/crypto/sha/packed/conformance.bend:796

import Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/sha/packed/core.bend as Runtime
import bend-collections-laws-crypto@1.0.0.0/src/crypto/sha/state.bend as S
import bend-collections-laws-crypto@1.0.0.0/proofs/crypto/sha/packed/core_model.bend as C

796law kr59_correct:
797  for +q: Nat
798  for +x0: U32
799  for +x1: U32
800  for +x2: U32
801  for +x3: U32
802  for +x4: U32
803  for +x5: U32
804  for +x6: U32
805  for +x7: U32
806  for +x8: U32
807  for +x9: U32
808  for +x10: U32
809  for +x11: U32
810  for +x12: U32
811  for +x13: U32
812  for +x14: U32
813  for +x15: U32
814  for +s: S.State
815  {Runtime.kr59(q, Runtime.W{x0, x1, x2, x3, x4, x5, x6, x7, x8, x9, x10, x11, x12, x13, x14, x15}, s) ==
816    C.window_rounds(q, Runtime.W{x0, x1, x2, x3, x4, x5, x6, x7, x8, x9, x10, x11, x12, x13, x14, x15}, [2361852424, 2428436474, 2756734187, 3204031479, 3329325298], s) : S.State}