law pad16_correct

bend-collections@1.0.0.0 · proofs/crypto/sha/packed/packed_proof.bend:431

import Base
import bend-collections@1.0.0.0/src/crypto/sha/packed/packed.bend as P
import bend-collections@1.0.0.0/spec/crypto/sha/packed.bend as R
import bend-collections@1.0.0.0/src/crypto/sha/state.bend as S

431law pad16_correct:
432  for +extra: Nat
433  for +index: U32
434  for +s: S.State
435  for +remain: Nat
436  for +total: Nat
437  for +w0: U32
438  for +w1: U32
439  for +w2: U32
440  for +w3: U32
441  for +w4: U32
442  for +w5: U32
443  for +w6: U32
444  for +w7: U32
445  for +w8: U32
446  for +w9: U32
447  for +w10: U32
448  for +w11: U32
449  for +w12: U32
450  for +w13: U32
451  for +w14: U32
452  for pair: Array<U32> & U32
453  {P.pad16(extra,index,s,remain,total,w0,w1,w2,w3,w4,w5,w6,w7,w8,w9,w10,w11,w12,w13,w14,pair) == R.gather(extra,0n,index,True{},remain,total,s,[w14,w13,w12,w11,w10,w9,w8,w7,w6,w5,w4,w3,w2,w1,w0],pair) : Array<U32> & S.State}