law aes256gcm_nist_rejects_changed_aad

qasim-bend-kit@0.1.0.2 · LAWS.bend:597

import Base
import qasim-bend-kit@0.1.0.2/libs/AES256GCM.bend as AES

597# Concrete tamper checks supplement tag uniqueness without claiming collision-
598# free authentication for all distinct AAD, nonce, key, or ciphertext inputs.
599law aes256gcm_nist_rejects_changed_aad:
600    {AES.decrypt(aes256gcm_nist_key(), [1], aes256gcm_nist_empty()) ==
601        Fail{AES.AuthenticationFailed{}} :
602        Result<&2, &2, AES.Error, List<&2, U32>>}