law pad8_correct

bend-collections@1.0.0.0 · proofs/crypto/sha/packed/packed_proof.bend:635

import Base
import bend-collections@1.0.0.0/src/crypto/sha/packed/packed.bend as P
import bend-collections@1.0.0.0/spec/crypto/sha/packed.bend as R
import bend-collections@1.0.0.0/src/crypto/sha/state.bend as S

635law pad8_correct:
636  for +extra: Nat
637  for +index: U32
638  for +s: S.State
639  for +remain: Nat
640  for +total: Nat
641  for +w0: U32
642  for +w1: U32
643  for +w2: U32
644  for +w3: U32
645  for +w4: U32
646  for +w5: U32
647  for +w6: U32
648  for pair: Array<U32> & U32
649  {P.pad8(extra,index,s,remain,total,w0,w1,w2,w3,w4,w5,w6,pair) == R.gather(extra,8n,index,True{},remain,total,s,[w6,w5,w4,w3,w2,w1,w0],pair) : Array<U32> & S.State}