law sha256_correct

bend-collections@1.0.0.0 · proofs/crypto/sha/conformance.bend:2737

import Base
import bend-collections@1.0.0.0/src/crypto/sha/core.bend as C
import bend-collections@1.0.0.0/spec/crypto/sha.bend as F

2737# Unlike the old theorem, there is NO arbitrary preprocessing parameter.
2738# This proves the actual implementation pipeline against the independent one.
2739law sha256_correct:
2740  for +bytes: List<&2, U32>
2741  {C.sha256(bytes) == F.hash(bytes, 48n, C.round_constants()) : List<&2, U32>}