law sha256_correct

bend-collections@1.0.0.0 · proofs/crypto/sha/packed/conformance.bend:2738

import Base
import bend-collections@1.0.0.0/proofs/crypto/sha/packed/core_model.bend as C
import bend-collections@1.0.0.0/spec/crypto/sha.bend as F

2738# Unlike the old theorem, there is NO arbitrary preprocessing parameter.
2739# This proves the actual implementation pipeline against the independent one.
2740law sha256_correct:
2741  for +bytes: List<&2, U32>
2742  {C.sha256(bytes) == F.hash(bytes, 48n, C.round_constants()) : List<&2, U32>}