def next_word_slow
import bend-collections-laws-crypto@1.0.0.0/proofs/crypto/sha/packed/core_model.bend as CoreModelimport Base
import bend-collections-laws-crypto@1.0.0.0/src/crypto/sha/packed/core.bend as Runtime
18# Reverse history: at round t, index j contains Runtime.W[t-1-j].
19def next_word_slow(+history: List<&2, U32>) -> U32:
20 (Runtime.small1(get(history, 1n)) + get(history, 6n)
21 + Runtime.small0(get(history, 14n)) + get(history, 15n) : U32)