law kr24_correct

bend-collections@1.0.0.0 · proofs/crypto/sha/packed/conformance.bend:1846

import Base
import bend-collections@1.0.0.0/src/crypto/sha/packed/core.bend as Runtime
import bend-collections@1.0.0.0/src/crypto/sha/state.bend as S
import bend-collections@1.0.0.0/proofs/crypto/sha/packed/core_model.bend as C

1846law kr24_correct:
1847  for +q: Nat
1848  for +x0: U32
1849  for +x1: U32
1850  for +x2: U32
1851  for +x3: U32
1852  for +x4: U32
1853  for +x5: U32
1854  for +x6: U32
1855  for +x7: U32
1856  for +x8: U32
1857  for +x9: U32
1858  for +x10: U32
1859  for +x11: U32
1860  for +x12: U32
1861  for +x13: U32
1862  for +x14: U32
1863  for +x15: U32
1864  for +s: S.State
1865  {Runtime.kr24(q, Runtime.W{x0, x1, x2, x3, x4, x5, x6, x7, x8, x9, x10, x11, x12, x13, x14, x15}, s) ==
1866    C.window_rounds(q, Runtime.W{x0, x1, x2, x3, x4, x5, x6, x7, x8, x9, x10, x11, x12, x13, x14, x15}, [2554220882, 2821834349, 2952996808, 3210313671, 3336571891, 3584528711, 113926993, 338241895, 666307205, 773529912, 1294757372, 1396182291, 1695183700, 1986661051, 2177026350, 2456956037, 2730485921, 2820302411, 3259730800, 3345764771, 3516065817, 3600352804, 4094571909, 275423344, 430227734, 506948616, 659060556, 883997877, 958139571, 1322822218, 1537002063, 1747873779, 1955562222, 2024104815, 2227730452, 2361852424, 2428436474, 2756734187, 3204031479, 3329325298], s) : S.State}