def rc4_xs_xs
bend-osdev-legacy-ciphers@0.1.0.0 · PROOF.bend:8457
import bend-osdev-legacy-ciphers@0.1.0.0/PROOF.bend as PROOF
import Base
import bend-osdev-bytes@0.1.0.0/bytes.bend as B
import bend-osdev-legacy-ciphers@0.1.0.0/rc4.bend as R
8457def rc4_xs_xs(ys: List<&2, U32>, +st: R.LcRc4State) -> {B.mask(ys) == R.rc4.xs(R.rc4.xs(ys, st), st) : List<&2, U32>}:
8458 match ys:
8459 case Nil{}:
8460 {==}
8461 case Con{+h, +t}:
8462 %byte_xx(h, R.rc4.step.k(R.rc4.next(st))) : {Con{B.byte(h), B.mask(t)} == Con{_, R.rc4.xs(R.rc4.xs(t, R.rc4.step.st(R.rc4.next(st))), R.rc4.step.st(R.rc4.next(st)))} : List<&2, U32>}
8463 %rc4_xs_xs(t, R.rc4.step.st(R.rc4.next(st))) : {Con{B.byte(h), B.mask(t)} == Con{B.byte(h), _} : List<&2, U32>}
8464 {==}