@@ -556,7 +556,7 @@ val loadState_lemma_l:
556556 Lemma
557557 ( requires
558558 forall l . l < lanes m ==> ( forall j . ( j >= r /\ j < 256 ) ==> Seq. index b .(| l |) j == u8 0 ))
559- ( ensures
559+ ( ensures
560560 ( state_spec_v ( loadState # m r b s )).[ l ] ==
561561 Spec. loadState r ( Seq. slice b .(| l |) 0 r ) ( state_spec_v s ).[ l ])
562562
@@ -1043,7 +1043,7 @@ let storeState_update_b_last_lemma_l #m r outputByteLen outRem b s l =
10431043val absorb_inner_lemma_l :
10441044 # m : m_spec
10451045 -> r : size_nat { r > 0 /\ r <= 200 }
1046- -> input : multiseq ( lanes m ) 256 { forall l . l < lanes m ==>
1046+ -> input : multiseq ( lanes m ) 256 { forall l . l < lanes m ==>
10471047 ( forall i . ( i >= r /\ i < 256 ) ==> Seq. index input .(| l |) i == u8 0 )}
10481048 -> s : state_spec m
10491049 -> l :nat{ l < lanes m } ->
@@ -1163,12 +1163,12 @@ val load_last_block_lemma_helper:
11631163 Seq. index b rem == byte_to_uint8 delimitedSuffix /\
11641164 ( forall i . ( i >= ( rem + 1 ) /\ i < r ) ==> Seq. index b i == u8 0 ))
11651165
1166- let load_last_block_lemma_helper # m delimitedSuffix r rem input =
1166+ let load_last_block_lemma_helper # m delimitedSuffix r rem input =
11671167 let b_0 = update_sub ( create r ( u8 0 )) 0 rem input in
11681168 let b = b_0 .[ rem ] <- byte_to_uint8 delimitedSuffix in
11691169 eq_intro ( slice # uint8 # r b_0 ( rem + 1 ) r )
11701170 ( create ( r - ( rem + 1 )) ( u8 0 ));
1171- assert ( forall j . ( j >= 0 /\ j < ( r - ( rem + 1 ))) ==>
1171+ assert ( forall j . ( j >= 0 /\ j < ( r - ( rem + 1 ))) ==>
11721172 Seq. index ( slice # uint8 # r b ( rem + 1 ) r ) j ==
11731173 Seq. index b (( rem + 1 ) + j ));
11741174 assert ( forall j . ( j >= ( rem + 1 ) /\ j < r ) ==> ( j - ( rem + 1 ) >= 0 ))
@@ -1178,7 +1178,7 @@ let load_last_block_lemma_helper #m delimitedSuffix r rem input =
11781178 -> delimitedSuffix : byte_t
11791179 -> r : size_nat { r > 0 /\ r <= 200 }
11801180 -> rem : size_nat { rem < r }
1181- -> input : multiseq ( lanes m ) 256 { forall l . l < lanes m ==>
1181+ -> input : multiseq ( lanes m ) 256 { forall l . l < lanes m ==>
11821182 ( forall i . ( i >= rem /\ i < 256 ) ==> Seq. index input .(| l |) i == u8 0 )}
11831183 -> l :nat{ l < lanes m } ->
11841184 Lemma
@@ -1197,7 +1197,7 @@ val absorb_last_lemma_l:
11971197 -> delimitedSuffix : byte_t
11981198 -> r : size_nat { r > 0 /\ r <= 200 }
11991199 -> rem : size_nat { rem < r }
1200- -> input : multiseq ( lanes m ) 256 { forall l . l < lanes m ==>
1200+ -> input : multiseq ( lanes m ) 256 { forall l . l < lanes m ==>
12011201 ( forall i . ( i >= rem /\ i < 256 ) ==> Seq. index input .(| l |) i == u8 0 )}
12021202 -> s : state_spec m
12031203 -> l :nat{ l < lanes m } ->
@@ -1457,7 +1457,7 @@ let absorb_inner_repeat_blocks_multi_lemma r inputByteLen input s =
14571457 reveal_vec_1 U64 ;
14581458 let aux_s ( i :nat{ i < 25 }) : Lemma ( s .[ i ] == ( vec_v # U64 # 1 s .[ i ]).[ 0 ]) =
14591459 reveal_vec_v_1 # U64 s .[ i ] in
1460- let aux_n ( i :nat{ i < 25 }) : Lemma (( absorb_inner_nblocks # M32 r inputByteLen input s ).[ i ] ==
1460+ let aux_n ( i :nat{ i < 25 }) : Lemma (( absorb_inner_nblocks # M32 r inputByteLen input s ).[ i ] ==
14611461 (( vec_v ( absorb_inner_nblocks # M32 r inputByteLen input s ).[ i ]).[ 0 ] <: vec_t U64 1 )) =
14621462 reveal_vec_v_1 ( absorb_inner_nblocks # M32 r inputByteLen input s ).[ i ] in
14631463
@@ -1473,7 +1473,7 @@ let absorb_inner_block_r_lemma r input s =
14731473 reveal_vec_1 U64 ;
14741474 let aux_s ( i :nat{ i < 25 }) : Lemma ( s .[ i ] == ( vec_v # U64 # 1 s .[ i ]).[ 0 ]) =
14751475 reveal_vec_v_1 # U64 s .[ i ] in
1476- let aux_n ( i :nat{ i < 25 }) : Lemma (( absorb_inner_block # M32 r r input 0 s ).[ i ] ==
1476+ let aux_n ( i :nat{ i < 25 }) : Lemma (( absorb_inner_block # M32 r r input 0 s ).[ i ] ==
14771477 (( vec_v ( absorb_inner_block # M32 r r input 0 s ).[ i ]).[ 0 ] <: vec_t U64 1 )) =
14781478 reveal_vec_v_1 ( absorb_inner_block # M32 r r input 0 s ).[ i ] in
14791479
@@ -1491,7 +1491,7 @@ let absorb_last_r_lemma delimitedSuffix r inputByteLen input s =
14911491 let aux_s ( i :nat{ i < 25 }) : Lemma ( s .[ i ] == ( vec_v # U64 # 1 s .[ i ]).[ 0 ]) =
14921492 reveal_vec_v_1 # U64 s .[ i ] in
14931493 let aux_n ( i :nat{ i < 25 }) : Lemma
1494- (( absorb_final # M32 s r inputByteLen input delimitedSuffix ).[ i ] ==
1494+ (( absorb_final # M32 s r inputByteLen input delimitedSuffix ).[ i ] ==
14951495 (( vec_v ( absorb_final # M32 s r inputByteLen input
14961496 delimitedSuffix ).[ i ]).[ 0 ] <: vec_t U64 1 )) =
14971497 reveal_vec_v_1 ( absorb_final # M32 s r inputByteLen input delimitedSuffix ).[ i ] in
0 commit comments