def aria_d0
import bend-osdev-legacy-ciphers@0.1.0.0/PROOF.bend as PROOFimport Base
import bend-osdev-legacy-ciphers@0.1.0.0/aria.bend as A
8174# the first j steps undone, last first, and the reverse
8175def aria_d0(s: A.LcAriaSt) -> {s == A.aria.u0(A.aria.d0(s)) : A.LcAriaSt}:
8176 {==}