law pad9_correct

bend-collections@1.0.0.0 · proofs/crypto/sha/packed/packed_proof.bend:614

import Base
import bend-collections@1.0.0.0/src/crypto/sha/packed/packed.bend as P
import bend-collections@1.0.0.0/spec/crypto/sha/packed.bend as R
import bend-collections@1.0.0.0/src/crypto/sha/state.bend as S

614law pad9_correct:
615  for +extra: Nat
616  for +index: U32
617  for +s: S.State
618  for +remain: Nat
619  for +total: Nat
620  for +w0: U32
621  for +w1: U32
622  for +w2: U32
623  for +w3: U32
624  for +w4: U32
625  for +w5: U32
626  for +w6: U32
627  for +w7: U32
628  for pair: Array<U32> & U32
629  {P.pad9(extra,index,s,remain,total,w0,w1,w2,w3,w4,w5,w6,w7,pair) == R.gather(extra,7n,index,True{},remain,total,s,[w7,w6,w5,w4,w3,w2,w1,w0],pair) : Array<U32> & S.State}