def sub_nat
import bend-collections-laws-crypto@1.0.0.0/proofs/lib/u32.bend as U32import Base
import bend-collections-laws-crypto@1.0.0.0/proofs/lib/lemmas/proofs/subtraction_bounds.bend as SB
100def sub_nat(+a: U32, +b: U32, +e: {Nat.is_le(U32.to_nat(b), U32.to_nat(a)) == True{} : Bool}) -> {U32.to_nat(U32.sub(a, b)) == Nat.sub(U32.to_nat(a), U32.to_nat(b)) : Nat}:
101 SB.u32_exact(a, b, e)
Uses (8)
Used by (10)
- bend-collections-laws-crypto@1.0.0.0/proofs/crypto/curve25519/fieldops:subl_v
- bend-collections-laws-crypto@1.0.0.0/proofs/lib/array:sub_bridge
- bend-collections-laws-crypto@1.0.0.0/proofs/lib/u32:mask_pow2u
- bend-collections-laws-crypto@1.0.0.0/proofs/lib/u32div:fin_ge
- bend-collections-laws-crypto@1.0.0.0/proofs/math/typed/w64dm:qdn
- …