[ "ZR܏yH%˕cR\"=", [ [ "Hacl.Bignum.AlmostMontExponentiation.a_spec", 1, 0, 0, [ "@MaxIFuel_assumption", "@query", "equation_Hacl.Spec.Bignum.bn_len", "equation_Prims.pos", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_9a3e47960c8f13c0402e1a809c52535a" ], 0, "3e4b3c0859fcc203125661b315787b13" ], [ "Hacl.Bignum.AlmostMontExponentiation.a_spec", 2, 0, 0, [ "@MaxIFuel_assumption", "@query", "refinement_interpretation_Tm_refine_8cbce6535fc28d41b6742c7f2b4ce0c4" ], 0, "efa84ab44af03050823d0d9fd285654d" ], [ "Hacl.Bignum.AlmostMontExponentiation.linv", 1, 0, 0, [ "@MaxIFuel_assumption", "@query", "equation_Hacl.Spec.Bignum.bn_len", "equation_Prims.pos", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_9a3e47960c8f13c0402e1a809c52535a" ], 0, "f1ebecf5056d534de3163b00046b1841" ], [ "Hacl.Bignum.AlmostMontExponentiation.linv", 2, 0, 0, [ "@MaxIFuel_assumption", "@query", "constructor_distinct_Lib.IntTypes.S16", "constructor_distinct_Lib.IntTypes.S32", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U1", "constructor_distinct_Lib.IntTypes.U16", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U64", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U64@tok", "equation_Hacl.Bignum.Definitions.limb_t", "equation_Hacl.Spec.Bignum.Definitions.limb_t", "equation_Hacl.Spec.Bignum.bn_len", "equation_Lib.IntTypes.bits", "equation_Prims.pos", "primitive_Prims.op_Multiply", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_9a3e47960c8f13c0402e1a809c52535a", "refinement_interpretation_Tm_refine_cfc744b198940c21e3f980c86ac17a92" ], 0, "5a018a376b8a6af9bbbbecb9d1e3174d" ], [ "Hacl.Bignum.AlmostMontExponentiation.refl", 1, 0, 0, [ "@MaxIFuel_assumption", "@query", "equation_Hacl.Spec.Bignum.bn_len", "equation_Prims.pos", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_9a3e47960c8f13c0402e1a809c52535a" ], 0, "f8e283327bcb3c718812ac46538caa94" ], [ "Hacl.Bignum.AlmostMontExponentiation.refl", 2, 0, 0, [ "@MaxIFuel_assumption", "@query", "equation_Hacl.Spec.Bignum.Definitions.bn_v", "equation_Hacl.Spec.Bignum.bn_len", "equation_Prims.pos", "primitive_Prims.op_Modulus", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_8cbce6535fc28d41b6742c7f2b4ce0c4", "refinement_interpretation_Tm_refine_9a3e47960c8f13c0402e1a809c52535a" ], 0, "9034cfb545b35d555e0d84f80772c071" ], [ "Hacl.Bignum.AlmostMontExponentiation.linv_ctx", 1, 0, 0, [ "@MaxIFuel_assumption", "@query", "equation_Hacl.Spec.Bignum.bn_len", "equation_Prims.pos", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_9a3e47960c8f13c0402e1a809c52535a" ], 0, "ce69f10125a8dcd87c51509b706340d5" ], [ "Hacl.Bignum.AlmostMontExponentiation.linv_ctx", 2, 0, 0, [ "@query" ], 0, "33ccb3f13d0355476a9c1ea54966396a" ], [ "Hacl.Bignum.AlmostMontExponentiation.mk_to_nat_mont_ll_comm_monoid", 1, 0, 0, [ "@MaxIFuel_assumption", "@query", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.U32@tok", "equation_Hacl.Bignum.meta_len", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "refinement_interpretation_Tm_refine_06eb4f1fa9612b97cc2b633a94839814", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "typing_Lib.IntTypes.v", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "675adde4e884883141e804bc6257fb29" ], [ "Hacl.Bignum.AlmostMontExponentiation.mk_to_nat_mont_ll_comm_monoid", 2, 0, 0, [ "@MaxIFuel_assumption", "@query", "constructor_distinct_Lib.IntTypes.S16", "constructor_distinct_Lib.IntTypes.S32", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U1", "constructor_distinct_Lib.IntTypes.U16", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U64", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.SEC@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U64@tok", "equation_Hacl.Bignum.Definitions.limb", "equation_Hacl.Bignum.Definitions.limb_t", "equation_Hacl.Bignum.meta_len", "equation_Hacl.Spec.Bignum.Definitions.limb", "equation_Hacl.Spec.Bignum.Definitions.limb_t", "equation_Hacl.Spec.Bignum.Montgomery.bn_mont_pre", "equation_Hacl.Spec.Montgomery.Lemmas.mont_pre", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_06eb4f1fa9612b97cc2b633a94839814", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_cfc744b198940c21e3f980c86ac17a92", "refinement_interpretation_Tm_refine_e9dde3ccbc0931573fbdc49eeca8c028", "typing_Lib.IntTypes.v", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.SEC@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "80509e8b0a3158a3e7c3d74b26af49af" ], [ "Hacl.Bignum.AlmostMontExponentiation.bn_almost_mont_one_st", 1, 0, 0, [ "@MaxIFuel_assumption", "@query", "constructor_distinct_Lib.Buffer.MUT", "constructor_distinct_Lib.IntTypes.PUB", "constructor_distinct_Lib.IntTypes.S16", "constructor_distinct_Lib.IntTypes.S32", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U1", "constructor_distinct_Lib.IntTypes.U16", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U64", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.Buffer.MUT@tok", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.SEC@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U64@tok", "equation_Hacl.Bignum.Definitions.bn_v", "equation_Hacl.Bignum.Definitions.lbignum", "equation_Hacl.Bignum.Definitions.limb", "equation_Hacl.Bignum.Definitions.limb_t", "equation_Hacl.Bignum.meta_len", "equation_Hacl.Spec.Bignum.Definitions.limb", "equation_Hacl.Spec.Bignum.Definitions.limb_t", "equation_Hacl.Spec.Bignum.Montgomery.bn_mont_pre", "equation_Hacl.Spec.Montgomery.Lemmas.mont_pre", "equation_Lib.Buffer.lbuffer_t", "equation_Lib.Buffer.length", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.int_t", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.pub_int_t", "equation_Lib.IntTypes.pub_int_v", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_LowStar.Monotonic.Buffer.length", "lemma_FStar.UInt32.uv_inv", "primitive_Prims.op_Multiply", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_06eb4f1fa9612b97cc2b633a94839814", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_9d89bf7b57667578cd0e1f4470daef3b", "refinement_interpretation_Tm_refine_cfc744b198940c21e3f980c86ac17a92", "refinement_interpretation_Tm_refine_e7eedee183e4b78ed467c3083769c7e2", "typing_Lib.IntTypes.v", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.SEC@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "2971d993314da4d08326bc8b0356d562" ], [ "Hacl.Bignum.AlmostMontExponentiation.bn_almost_mont_one", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.Buffer.MUT", "constructor_distinct_Lib.IntTypes.PUB", "constructor_distinct_Lib.IntTypes.S16", "constructor_distinct_Lib.IntTypes.S32", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U16", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U64", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.Buffer.MUT@tok", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.SEC@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U64@tok", "equation_Hacl.Bignum.Definitions.bn_v", "equation_Hacl.Bignum.Definitions.lbignum", "equation_Hacl.Bignum.Definitions.limb", "equation_Hacl.Bignum.Definitions.limb_t", "equation_Hacl.Bignum.meta_len", "equation_Hacl.Spec.Bignum.Definitions.limb_t", "equation_Hacl.Spec.Bignum.Montgomery.bn_mont_pre", "equation_Hacl.Spec.Exponentiation.Lemmas.mont_one_ll", "equation_Lib.Buffer.lbuffer_t", "equation_Lib.Buffer.length", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.int_t", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.pub_int_t", "equation_Lib.IntTypes.pub_int_v", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_LowStar.Buffer.trivial_preorder", "equation_LowStar.Monotonic.Buffer.length", "equation_Prims.nat", "fuel_guarded_inversion_Hacl.Bignum.AlmostMontgomery.almost_mont", "int_typing", "lemma_FStar.UInt.pow2_values", "lemma_FStar.UInt32.uv_inv", "primitive_Prims.op_Addition", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "proj_equation_Hacl.Bignum.Mkbn_len", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_06eb4f1fa9612b97cc2b633a94839814", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_67a039288bce0d69806d550a655b3d66", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_9d89bf7b57667578cd0e1f4470daef3b", "refinement_interpretation_Tm_refine_cfc744b198940c21e3f980c86ac17a92", "typing_Hacl.Bignum.AlmostMontgomery.__proj__Mkalmost_mont__item__bn", "typing_Hacl.Bignum.__proj__Mkbn__item__len", "typing_Lib.IntTypes.v", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "18137173e5dc3203e180ddb9b59b6832" ], [ "Hacl.Bignum.AlmostMontExponentiation.bn_almost_mont_mul", 1, 0, 0, [ "@MaxIFuel_assumption", "@query", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.U32@tok", "equation_Hacl.Bignum.meta_len", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.v", "fuel_guarded_inversion_Hacl.Bignum.AlmostMontgomery.almost_mont", "proj_equation_Hacl.Bignum.Mkbn_len", "refinement_interpretation_Tm_refine_06eb4f1fa9612b97cc2b633a94839814", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_cfc41488cee641ca406ae764563b3947", "typing_Hacl.Bignum.AlmostMontgomery.__proj__Mkalmost_mont__item__bn", "typing_Hacl.Bignum.__proj__Mkbn__item__len", "typing_Lib.IntTypes.v", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "24977b19ef749e5c580dbb4defdd3602" ], [ "Hacl.Bignum.AlmostMontExponentiation.bn_almost_mont_mul", 2, 0, 0, [ "@MaxIFuel_assumption", "@query", "constructor_distinct_Lib.IntTypes.U1", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U64", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U64@tok", "equation_Hacl.Bignum.Definitions.limb_t", "equation_Hacl.Bignum.meta_len", "equation_Hacl.Spec.Bignum.Definitions.limb_t", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "fuel_guarded_inversion_Hacl.Bignum.AlmostMontgomery.almost_mont", "proj_equation_Hacl.Bignum.Mkbn_len", "projection_inverse_BoxBool_proj_0", "refinement_interpretation_Tm_refine_06eb4f1fa9612b97cc2b633a94839814", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_cfc744b198940c21e3f980c86ac17a92", "typing_Hacl.Bignum.AlmostMontgomery.__proj__Mkalmost_mont__item__bn", "typing_Hacl.Bignum.__proj__Mkbn__item__len", "typing_Lib.IntTypes.v", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "6b904101e33262ccafbe1ca7e94f00b1" ], [ "Hacl.Bignum.AlmostMontExponentiation.bn_almost_mont_mul", 3, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "b2t_def", "bool_inversion", "constructor_distinct_Lib.Buffer.MUT", "constructor_distinct_Lib.IntTypes.PUB", "constructor_distinct_Lib.IntTypes.S16", "constructor_distinct_Lib.IntTypes.S32", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U1", "constructor_distinct_Lib.IntTypes.U16", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U64", "constructor_distinct_Lib.IntTypes.U8", "eq2-interp", "equality_tok_Lib.Buffer.MUT@tok", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.SEC@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U64@tok", "equation_FStar.Monotonic.HyperHeap.hmap", "equation_FStar.Monotonic.HyperStack.is_tip", "equation_FStar.Monotonic.HyperStack.is_wf_with_ctr_and_tip", "equation_FStar.Monotonic.HyperStack.mem", "equation_Hacl.Bignum.AlmostMontExponentiation.a_spec", "equation_Hacl.Bignum.AlmostMontExponentiation.linv", "equation_Hacl.Bignum.AlmostMontExponentiation.linv_ctx", "equation_Hacl.Bignum.AlmostMontExponentiation.mk_to_nat_mont_ll_comm_monoid", "equation_Hacl.Bignum.AlmostMontExponentiation.refl", "equation_Hacl.Bignum.Definitions.bn_v", "equation_Hacl.Bignum.Definitions.limb", "equation_Hacl.Bignum.Definitions.limb_t", "equation_Hacl.Bignum.meta_len", "equation_Hacl.Spec.Bignum.Definitions.bn_v", "equation_Hacl.Spec.Bignum.Definitions.lbignum", "equation_Hacl.Spec.Bignum.Definitions.limb", "equation_Hacl.Spec.Bignum.Definitions.limb_t", "equation_Hacl.Spec.Bignum.Montgomery.bn_mont_pre", "equation_Hacl.Spec.Exponentiation.Lemmas.mk_nat_mont_ll_comm_monoid", "equation_Hacl.Spec.Exponentiation.Lemmas.mont_mul_ll", "equation_Hacl.Spec.Montgomery.Lemmas.mont_pre", "equation_Lib.Buffer.as_seq", "equation_Lib.Buffer.disjoint", "equation_Lib.Buffer.lbuffer_t", "equation_Lib.Buffer.length", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.int_t", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.pub_int_t", "equation_Lib.IntTypes.pub_int_v", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_LowStar.Buffer.trivial_preorder", "equation_LowStar.Monotonic.Buffer.length", "equation_Prims.nat", "fuel_guarded_inversion_Hacl.Bignum.AlmostMontgomery.almost_mont", "function_token_typing_FStar.Monotonic.Heap.heap", "int_inversion", "int_typing", "lemma_FStar.Map.lemma_ContainsDom", "lemma_FStar.UInt.pow2_values", "lemma_FStar.UInt32.uv_inv", "lemma_LowStar.Monotonic.Buffer.loc_disjoint_sym_", "primitive_Prims.op_Addition", "primitive_Prims.op_LessThan", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "proj_equation_Hacl.Bignum.Mkbn_len", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_a_spec", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_comm_monoid", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_linv", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_linv_ctx", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_refl", "proj_equation_Lib.Exponentiation.Mkcomm_monoid_mul", "projection_inverse_BoxBool_proj_0", "projection_inverse_BoxInt_proj_0", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_a_spec", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_comm_monoid", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_linv", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_linv_ctx", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_refl", "projection_inverse_Lib.Exponentiation.Mkcomm_monoid_mul", "refinement_interpretation_Tm_refine_05e15190c946858f68c69156f585f95a", "refinement_interpretation_Tm_refine_06eb4f1fa9612b97cc2b633a94839814", "refinement_interpretation_Tm_refine_161d2b1bbd42f84649688b488269e808", "refinement_interpretation_Tm_refine_38fb76f9e41e592cd87d2da949a2f05e", "refinement_interpretation_Tm_refine_516b3c1d6dcfbffd80c250b8ee66363e", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_9d89bf7b57667578cd0e1f4470daef3b", "refinement_interpretation_Tm_refine_cfc744b198940c21e3f980c86ac17a92", "token_correspondence_Hacl.Bignum.AlmostMontExponentiation.linv", "token_correspondence_Hacl.Bignum.AlmostMontExponentiation.linv_ctx", "token_correspondence_Hacl.Bignum.AlmostMontExponentiation.refl", "token_correspondence_Hacl.Impl.Exponentiation.__proj__Mkto_comm_monoid__item__linv", "token_correspondence_Hacl.Impl.Exponentiation.__proj__Mkto_comm_monoid__item__linv_ctx", "token_correspondence_Hacl.Impl.Exponentiation.__proj__Mkto_comm_monoid__item__refl", "token_correspondence_Hacl.Spec.Exponentiation.Lemmas.mont_mul_ll", "token_correspondence_Lib.Exponentiation.__proj__Mkcomm_monoid__item__mul", "typing_FStar.Map.contains", "typing_FStar.Monotonic.HyperHeap.rid", "typing_FStar.Monotonic.HyperStack.get_hmap", "typing_FStar.Monotonic.HyperStack.get_tip", "typing_Hacl.Bignum.AlmostMontgomery.__proj__Mkalmost_mont__item__bn", "typing_Hacl.Bignum.__proj__Mkbn__item__len", "typing_Hacl.Spec.Bignum.Definitions.limb", "typing_Lib.Buffer.loc", "typing_Lib.IntTypes.bits", "typing_Lib.IntTypes.v", "typing_tok_Lib.Buffer.MUT@tok", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.SEC@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "93a1076e35b7c1b2b439571326b50115" ], [ "Hacl.Bignum.AlmostMontExponentiation.bn_almost_mont_sqr", 1, 0, 0, [ "@MaxIFuel_assumption", "@query", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.U32@tok", "equation_Hacl.Bignum.meta_len", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.v", "fuel_guarded_inversion_Hacl.Bignum.AlmostMontgomery.almost_mont", "proj_equation_Hacl.Bignum.Mkbn_len", "refinement_interpretation_Tm_refine_06eb4f1fa9612b97cc2b633a94839814", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_cfc41488cee641ca406ae764563b3947", "typing_Hacl.Bignum.AlmostMontgomery.__proj__Mkalmost_mont__item__bn", "typing_Hacl.Bignum.__proj__Mkbn__item__len", "typing_Lib.IntTypes.v", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "8a6d90b53b4ee576b2078261a5c8640c" ], [ "Hacl.Bignum.AlmostMontExponentiation.bn_almost_mont_sqr", 2, 0, 0, [ "@MaxIFuel_assumption", "@query", "constructor_distinct_Lib.IntTypes.U1", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U64", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U64@tok", "equation_Hacl.Bignum.Definitions.limb_t", "equation_Hacl.Bignum.meta_len", "equation_Hacl.Spec.Bignum.Definitions.limb_t", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "fuel_guarded_inversion_Hacl.Bignum.AlmostMontgomery.almost_mont", "proj_equation_Hacl.Bignum.Mkbn_len", "projection_inverse_BoxBool_proj_0", "refinement_interpretation_Tm_refine_06eb4f1fa9612b97cc2b633a94839814", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_cfc744b198940c21e3f980c86ac17a92", "typing_Hacl.Bignum.AlmostMontgomery.__proj__Mkalmost_mont__item__bn", "typing_Hacl.Bignum.__proj__Mkbn__item__len", "typing_Lib.IntTypes.v", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "aa166ce5f07fe5b5de281ddb17fe3124" ], [ "Hacl.Bignum.AlmostMontExponentiation.bn_almost_mont_sqr", 3, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "b2t_def", "bool_inversion", "constructor_distinct_Lib.Buffer.MUT", "constructor_distinct_Lib.IntTypes.PUB", "constructor_distinct_Lib.IntTypes.S16", "constructor_distinct_Lib.IntTypes.S32", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U1", "constructor_distinct_Lib.IntTypes.U16", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U64", "constructor_distinct_Lib.IntTypes.U8", "eq2-interp", "equality_tok_Lib.Buffer.MUT@tok", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.SEC@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U64@tok", "equation_FStar.Monotonic.HyperHeap.hmap", "equation_FStar.Monotonic.HyperStack.is_tip", "equation_FStar.Monotonic.HyperStack.is_wf_with_ctr_and_tip", "equation_FStar.Monotonic.HyperStack.mem", "equation_Hacl.Bignum.AlmostMontExponentiation.a_spec", "equation_Hacl.Bignum.AlmostMontExponentiation.linv", "equation_Hacl.Bignum.AlmostMontExponentiation.linv_ctx", "equation_Hacl.Bignum.AlmostMontExponentiation.mk_to_nat_mont_ll_comm_monoid", "equation_Hacl.Bignum.AlmostMontExponentiation.refl", "equation_Hacl.Bignum.Definitions.bn_v", "equation_Hacl.Bignum.Definitions.limb", "equation_Hacl.Bignum.Definitions.limb_t", "equation_Hacl.Bignum.meta_len", "equation_Hacl.Impl.Exponentiation.refl", "equation_Hacl.Spec.Bignum.Definitions.bn_v", "equation_Hacl.Spec.Bignum.Definitions.lbignum", "equation_Hacl.Spec.Bignum.Definitions.limb", "equation_Hacl.Spec.Bignum.Definitions.limb_t", "equation_Hacl.Spec.Bignum.Montgomery.bn_mont_pre", "equation_Hacl.Spec.Exponentiation.Lemmas.mk_nat_mont_ll_comm_monoid", "equation_Hacl.Spec.Exponentiation.Lemmas.mont_mul_ll", "equation_Hacl.Spec.Montgomery.Lemmas.mont_pre", "equation_Lib.Buffer.as_seq", "equation_Lib.Buffer.lbuffer_t", "equation_Lib.Buffer.length", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.int_t", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.pub_int_t", "equation_Lib.IntTypes.pub_int_v", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_LowStar.Buffer.trivial_preorder", "equation_LowStar.Monotonic.Buffer.length", "equation_Prims.nat", "fuel_guarded_inversion_Hacl.Bignum.AlmostMontgomery.almost_mont", "function_token_typing_FStar.Monotonic.Heap.heap", "int_inversion", "int_typing", "interpretation_Tm_abs_ac55a2d3e083d3a88e49bb6bc7a29d9d", "lemma_FStar.Map.lemma_ContainsDom", "lemma_FStar.UInt.pow2_values", "lemma_FStar.UInt32.uv_inv", "primitive_Prims.op_Addition", "primitive_Prims.op_LessThan", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "proj_equation_Hacl.Bignum.Mkbn_len", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_a_spec", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_comm_monoid", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_linv", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_linv_ctx", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_refl", "proj_equation_Lib.Exponentiation.Mkcomm_monoid_mul", "projection_inverse_BoxBool_proj_0", "projection_inverse_BoxInt_proj_0", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_a_spec", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_comm_monoid", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_linv", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_linv_ctx", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_refl", "projection_inverse_Lib.Exponentiation.Mkcomm_monoid_mul", "refinement_interpretation_Tm_refine_05e15190c946858f68c69156f585f95a", "refinement_interpretation_Tm_refine_06eb4f1fa9612b97cc2b633a94839814", "refinement_interpretation_Tm_refine_1579cf1552973e2b2cea2420adfdc0a8", "refinement_interpretation_Tm_refine_516b3c1d6dcfbffd80c250b8ee66363e", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_9d89bf7b57667578cd0e1f4470daef3b", "refinement_interpretation_Tm_refine_cfc744b198940c21e3f980c86ac17a92", "refinement_interpretation_Tm_refine_fdd0d132c4a225beba5d8c3bb4dcd0e6", "token_correspondence_Hacl.Bignum.AlmostMontExponentiation.linv", "token_correspondence_Hacl.Bignum.AlmostMontExponentiation.linv_ctx", "token_correspondence_Hacl.Bignum.AlmostMontExponentiation.refl", "token_correspondence_Hacl.Impl.Exponentiation.__proj__Mkto_comm_monoid__item__linv", "token_correspondence_Hacl.Impl.Exponentiation.__proj__Mkto_comm_monoid__item__linv_ctx", "token_correspondence_Hacl.Impl.Exponentiation.__proj__Mkto_comm_monoid__item__refl", "token_correspondence_Hacl.Impl.Exponentiation.refl", "token_correspondence_Hacl.Spec.Exponentiation.Lemmas.mont_mul_ll", "token_correspondence_Lib.Exponentiation.__proj__Mkcomm_monoid__item__mul", "typing_FStar.Map.contains", "typing_FStar.Monotonic.HyperHeap.rid", "typing_FStar.Monotonic.HyperStack.get_hmap", "typing_FStar.Monotonic.HyperStack.get_tip", "typing_Hacl.Bignum.AlmostMontgomery.__proj__Mkalmost_mont__item__bn", "typing_Hacl.Bignum.__proj__Mkbn__item__len", "typing_Lib.IntTypes.bits", "typing_Lib.IntTypes.v", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.SEC@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "bb99b2928b3ee5d400c5d884b2a8652d" ], [ "Hacl.Bignum.AlmostMontExponentiation.mk_bn_almost_mont_concrete_ops", 1, 0, 0, [ "@MaxIFuel_assumption", "@query", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.U32@tok", "equation_Hacl.Bignum.meta_len", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.v", "fuel_guarded_inversion_Hacl.Bignum.AlmostMontgomery.almost_mont", "proj_equation_Hacl.Bignum.Mkbn_len", "refinement_interpretation_Tm_refine_06eb4f1fa9612b97cc2b633a94839814", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "typing_Hacl.Bignum.AlmostMontgomery.__proj__Mkalmost_mont__item__bn", "typing_Hacl.Bignum.__proj__Mkbn__item__len", "typing_Lib.IntTypes.v", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "5db6f6b935b6f5e1cd23060aa23af46d" ], [ "Hacl.Bignum.AlmostMontExponentiation.mk_bn_almost_mont_concrete_ops", 2, 0, 0, [ "@MaxIFuel_assumption", "@query", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.U32@tok", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "fuel_guarded_inversion_Hacl.Bignum.AlmostMontgomery.almost_mont", "lemma_FStar.Ghost.reveal_hide", "refinement_interpretation_Tm_refine_295fc33facfcea4974e8145ce690698c", "refinement_interpretation_Tm_refine_38fb76f9e41e592cd87d2da949a2f05e", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_cfc41488cee641ca406ae764563b3947", "refinement_interpretation_Tm_refine_d662078979e4fc94d5c17c853a7c84d4", "refinement_interpretation_Tm_refine_fdd0d132c4a225beba5d8c3bb4dcd0e6", "typing_Lib.IntTypes.v", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "74f8b634b3fc40ae628ce11260cb0a9f" ], [ "Hacl.Bignum.AlmostMontExponentiation.bn_exp_almost_mont_pre", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.S16", "constructor_distinct_Lib.IntTypes.S32", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U1", "constructor_distinct_Lib.IntTypes.U16", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U64", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U64@tok", "equation_Hacl.Bignum.Definitions.limb_t", "equation_Hacl.Spec.Bignum.Definitions.limb_t", "equation_Hacl.Spec.Bignum.bn_len", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.unsigned", "equation_Prims.nat", "equation_Prims.pos", "lemma_FStar.UInt.pow2_values", "primitive_Prims.op_Subtraction", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_9a3e47960c8f13c0402e1a809c52535a", "refinement_interpretation_Tm_refine_cfc744b198940c21e3f980c86ac17a92", "typing_Lib.IntTypes.bits", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "d2b4cf4ebbf05fd9948ccddb1883b737" ], [ "Hacl.Bignum.AlmostMontExponentiation.bn_exp_almost_mont_pre", 2, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.S16", "constructor_distinct_Lib.IntTypes.S32", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U1", "constructor_distinct_Lib.IntTypes.U16", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U64", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U64@tok", "equation_Hacl.Bignum.Definitions.limb", "equation_Hacl.Bignum.Definitions.limb_t", "equation_Hacl.Spec.Bignum.Definitions.blocks", "equation_Hacl.Spec.Bignum.Definitions.lbignum", "equation_Hacl.Spec.Bignum.Definitions.limb_t", "equation_Hacl.Spec.Bignum.Montgomery.bn_mont_pre", "equation_Hacl.Spec.Bignum.bn_len", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.unsigned", "equation_Lib.Sequence.lseq", "equation_Lib.Sequence.seq", "equation_Prims.nat", "equation_Prims.pos", "int_inversion", "lemma_FStar.UInt.pow2_values", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_0565159ca1a4309c5fab2a6822440faa", "refinement_interpretation_Tm_refine_44540322a5aeeac77ad2eb12638c2b4f", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_9a3e47960c8f13c0402e1a809c52535a", "refinement_interpretation_Tm_refine_cfc744b198940c21e3f980c86ac17a92", "refinement_interpretation_Tm_refine_d8d83307254a8900dd20598654272e42", "typing_FStar.Seq.Base.length", "typing_Hacl.Bignum.Definitions.limb", "typing_Hacl.Spec.Bignum.Definitions.blocks", "typing_Lib.IntTypes.bits", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "3d7c3abb0878cb28cb36dcdaa38f1aea" ], [ "Hacl.Bignum.AlmostMontExponentiation.bn_exp_almost_mont_st", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.S16", "constructor_distinct_Lib.IntTypes.S32", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U1", "constructor_distinct_Lib.IntTypes.U16", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U64", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.Buffer.MUT@tok", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.SEC@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U64@tok", "equation_Hacl.Bignum.AlmostMontExponentiation.bn_exp_almost_mont_pre", "equation_Hacl.Bignum.Definitions.blocks0", "equation_Hacl.Bignum.Definitions.bn_v", "equation_Hacl.Bignum.Definitions.limb", "equation_Hacl.Bignum.Definitions.limb_t", "equation_Hacl.Bignum.meta_len", "equation_Hacl.Spec.Bignum.Definitions.bn_v", "equation_Hacl.Spec.Bignum.Definitions.limb", "equation_Hacl.Spec.Bignum.Definitions.limb_t", "equation_Hacl.Spec.Bignum.Montgomery.bn_mont_pre", "equation_Hacl.Spec.Montgomery.Lemmas.mont_pre", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_Prims.nat", "int_inversion", "lemma_FStar.UInt.pow2_values", "lemma_Lib.IntTypes.v_mk_int", "primitive_Prims.op_Subtraction", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_06eb4f1fa9612b97cc2b633a94839814", "refinement_interpretation_Tm_refine_41580f36c63838f9c1dc45df2eac6171", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_7ba72209ebfc4b6df6549d7db2d3b27b", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_cfc744b198940c21e3f980c86ac17a92", "typing_Lib.IntTypes.bits", "typing_Lib.IntTypes.v", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.SEC@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "4eae39da0139a8fadab168c29d7c33fc" ], [ "Hacl.Bignum.AlmostMontExponentiation.bn_exp_almost_mont_bm_vartime", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.S16", "constructor_distinct_Lib.IntTypes.S32", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U1", "constructor_distinct_Lib.IntTypes.U16", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U64", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U64@tok", "equation_Hacl.Bignum.Definitions.limb_t", "equation_Hacl.Spec.Bignum.Definitions.limb_t", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Prims.nat", "fuel_guarded_inversion_Hacl.Bignum.AlmostMontgomery.almost_mont", "int_inversion", "int_typing", "lemma_FStar.UInt.pow2_values", "lemma_Lib.IntTypes.v_mk_int", "primitive_Prims.op_Subtraction", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_cfc744b198940c21e3f980c86ac17a92", "typing_Lib.IntTypes.bits", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "eddeb0e9ad6e168e8d82d5b83dc59814" ], [ "Hacl.Bignum.AlmostMontExponentiation.bn_exp_almost_mont_bm_vartime", 2, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "Prims_pretyping_ae567c2fb75be05905677af440075565", "b2t_def", "bool_inversion", "constructor_distinct_Lib.Buffer.MUT", "constructor_distinct_Lib.IntTypes.PUB", "constructor_distinct_Lib.IntTypes.S16", "constructor_distinct_Lib.IntTypes.S32", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U16", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U64", "constructor_distinct_Lib.IntTypes.U8", "eq2-interp", "equality_tok_Lib.Buffer.MUT@tok", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.SEC@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U64@tok", "equation_FStar.Monotonic.HyperHeap.hmap", "equation_FStar.Monotonic.HyperStack.is_tip", "equation_FStar.Monotonic.HyperStack.is_wf_with_ctr_and_tip", "equation_FStar.Monotonic.HyperStack.mem", "equation_FStar.UInt.fits", "equation_FStar.UInt.max_int", "equation_FStar.UInt.min_int", "equation_FStar.UInt.size", "equation_FStar.UInt.uint_t", "equation_Hacl.Bignum.AlmostMontExponentiation.a_spec", "equation_Hacl.Bignum.AlmostMontExponentiation.bn_exp_almost_mont_pre", "equation_Hacl.Bignum.AlmostMontExponentiation.linv", "equation_Hacl.Bignum.AlmostMontExponentiation.linv_ctx", "equation_Hacl.Bignum.AlmostMontExponentiation.mk_bn_almost_mont_concrete_ops", "equation_Hacl.Bignum.AlmostMontExponentiation.mk_to_nat_mont_ll_comm_monoid", "equation_Hacl.Bignum.AlmostMontExponentiation.refl", "equation_Hacl.Bignum.Definitions.blocks0", "equation_Hacl.Bignum.Definitions.bn_v", "equation_Hacl.Bignum.Definitions.lbignum", "equation_Hacl.Bignum.Definitions.limb", "equation_Hacl.Bignum.Definitions.limb_t", "equation_Hacl.Bignum.meta_len", "equation_Hacl.Impl.Exponentiation.inttype_a", "equation_Hacl.Spec.Bignum.Definitions.blocks0", "equation_Hacl.Spec.Bignum.Definitions.bn_v", "equation_Hacl.Spec.Bignum.Definitions.lbignum", "equation_Hacl.Spec.Bignum.Definitions.limb", "equation_Hacl.Spec.Bignum.Definitions.limb_t", "equation_Hacl.Spec.Bignum.Montgomery.bn_mont_pre", "equation_Hacl.Spec.Exponentiation.Lemmas.mk_nat_mont_ll_comm_monoid", "equation_Hacl.Spec.Montgomery.Lemmas.mont_pre", "equation_Lib.Buffer.as_seq", "equation_Lib.Buffer.buffer_t", "equation_Lib.Buffer.disjoint", "equation_Lib.Buffer.lbuffer_t", "equation_Lib.Buffer.length", "equation_Lib.Buffer.live", "equation_Lib.Buffer.loc", "equation_Lib.Buffer.modifies", "equation_Lib.Buffer.op_Bar_Plus_Bar", "equation_Lib.Buffer.union", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.int_t", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.pub_int_t", "equation_Lib.IntTypes.pub_int_v", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_LowStar.Buffer.buffer", "equation_LowStar.Buffer.trivial_preorder", "equation_LowStar.Monotonic.Buffer.length", "equation_Prims.nat", "fuel_guarded_inversion_Hacl.Bignum.AlmostMontgomery.almost_mont", "function_token_typing_FStar.Monotonic.Heap.heap", "function_token_typing_Prims.__cache_version_number__", "int_typing", "kinding_Hacl.Impl.Exponentiation.to_comm_monoid@tok", "lemma_FStar.Ghost.reveal_hide", "lemma_FStar.HyperStack.ST.lemma_equal_domains_trans", "lemma_FStar.Map.lemma_ContainsDom", "lemma_FStar.UInt.pow2_values", "lemma_FStar.UInt32.uv_inv", "lemma_FStar.UInt32.vu_inv", "lemma_Lib.IntTypes.eq_lemma", "lemma_LowStar.Monotonic.Buffer.address_liveness_insensitive_buffer", "lemma_LowStar.Monotonic.Buffer.loc_disjoint_sym_", "lemma_LowStar.Monotonic.Buffer.loc_includes_refl", "lemma_LowStar.Monotonic.Buffer.loc_includes_union_l_", "lemma_LowStar.Monotonic.Buffer.loc_union_comm", "lemma_LowStar.Monotonic.Buffer.modifies_buffer_elim", "lemma_LowStar.Monotonic.Buffer.modifies_liveness_insensitive_buffer_weak", "lemma_LowStar.Monotonic.Buffer.modifies_trans_linear", "primitive_Prims.op_Addition", "primitive_Prims.op_AmpAmp", "primitive_Prims.op_Division", "primitive_Prims.op_Equality", "primitive_Prims.op_LessThan", "primitive_Prims.op_LessThanOrEqual", "primitive_Prims.op_Modulus", "primitive_Prims.op_Subtraction", "proj_equation_Hacl.Bignum.Mkbn_len", "proj_equation_Hacl.Impl.Exponentiation.Mkconcrete_ops_to", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_a_spec", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_comm_monoid", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_linv", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_linv_ctx", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_refl", "proj_equation_Lib.Exponentiation.Mkcomm_monoid_one", "projection_inverse_BoxBool_proj_0", "projection_inverse_BoxInt_proj_0", "projection_inverse_Hacl.Impl.Exponentiation.Mkconcrete_ops_to", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_a_spec", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_comm_monoid", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_linv", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_linv_ctx", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_refl", "projection_inverse_Lib.Exponentiation.Mkcomm_monoid_one", "refinement_interpretation_Tm_refine_05e15190c946858f68c69156f585f95a", "refinement_interpretation_Tm_refine_06eb4f1fa9612b97cc2b633a94839814", "refinement_interpretation_Tm_refine_0ea1fba779ad5718e28476faeef94d56", "refinement_interpretation_Tm_refine_0ec011aea9f93256a3547ad9f0c667f1", "refinement_interpretation_Tm_refine_1395e0201fbf96e7fbf818c2d2e2ecb4", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_67a039288bce0d69806d550a655b3d66", "refinement_interpretation_Tm_refine_7ba72209ebfc4b6df6549d7db2d3b27b", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_9d3fd79fd314167f1a9c213a188da3ec", "refinement_interpretation_Tm_refine_9d89bf7b57667578cd0e1f4470daef3b", "refinement_interpretation_Tm_refine_cfc41488cee641ca406ae764563b3947", "refinement_interpretation_Tm_refine_cfc744b198940c21e3f980c86ac17a92", "refinement_interpretation_Tm_refine_e0bf359ff1d1900bf59fcc607bae4d56", "refinement_interpretation_Tm_refine_e9dde3ccbc0931573fbdc49eeca8c028", "refinement_interpretation_Tm_refine_f13070840248fced9d9d60d77bdae3ec", "token_correspondence_Hacl.Bignum.AlmostMontExponentiation.linv", "token_correspondence_Hacl.Bignum.AlmostMontExponentiation.linv_ctx", "token_correspondence_Hacl.Bignum.AlmostMontExponentiation.refl", "token_correspondence_Hacl.Impl.Exponentiation.__proj__Mkto_comm_monoid__item__linv", "token_correspondence_Hacl.Impl.Exponentiation.__proj__Mkto_comm_monoid__item__linv_ctx", "token_correspondence_Hacl.Impl.Exponentiation.__proj__Mkto_comm_monoid__item__refl", "typing_FStar.Map.contains", "typing_FStar.Monotonic.HyperHeap.rid", "typing_FStar.Monotonic.HyperStack.get_hmap", "typing_FStar.Monotonic.HyperStack.get_tip", "typing_FStar.UInt32.uint_to_t", "typing_FStar.UInt32.v", "typing_Hacl.Bignum.AlmostMontExponentiation.mk_to_nat_mont_ll_comm_monoid", "typing_Hacl.Bignum.AlmostMontgomery.__proj__Mkalmost_mont__item__bn", "typing_Hacl.Bignum.Definitions.limb", "typing_Hacl.Bignum.__proj__Mkbn__item__len", "typing_Lib.Buffer.as_seq", "typing_Lib.Buffer.length", "typing_Lib.Buffer.loc", "typing_Lib.Buffer.op_Bar_Plus_Bar", "typing_Lib.IntTypes.bits", "typing_Lib.IntTypes.mk_int", "typing_Lib.IntTypes.v", "typing_Lib.Sequence.lseq", "typing_LowStar.Buffer.trivial_preorder", "typing_LowStar.Monotonic.Buffer.len", "typing_tok_Lib.Buffer.MUT@tok", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.SEC@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "c8758bc5d8214330bbd0a83717697ade" ], [ "Hacl.Bignum.AlmostMontExponentiation.bn_exp_almost_mont_bm_consttime", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.S16", "constructor_distinct_Lib.IntTypes.S32", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U1", "constructor_distinct_Lib.IntTypes.U16", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U64", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U64@tok", "equation_Hacl.Bignum.Definitions.limb_t", "equation_Hacl.Spec.Bignum.Definitions.limb_t", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Prims.nat", "fuel_guarded_inversion_Hacl.Bignum.AlmostMontgomery.almost_mont", "int_inversion", "int_typing", "lemma_FStar.UInt.pow2_values", "lemma_Lib.IntTypes.v_mk_int", "primitive_Prims.op_Subtraction", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_cfc744b198940c21e3f980c86ac17a92", "typing_Lib.IntTypes.bits", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "e458c987543ca7955c137a9a91859ea5" ], [ "Hacl.Bignum.AlmostMontExponentiation.bn_exp_almost_mont_bm_consttime", 2, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "Prims_pretyping_ae567c2fb75be05905677af440075565", "b2t_def", "bool_inversion", "constructor_distinct_Lib.Buffer.MUT", "constructor_distinct_Lib.IntTypes.PUB", "constructor_distinct_Lib.IntTypes.S16", "constructor_distinct_Lib.IntTypes.S32", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U16", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U64", "constructor_distinct_Lib.IntTypes.U8", "eq2-interp", "equality_tok_Lib.Buffer.MUT@tok", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.SEC@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U64@tok", "equation_FStar.Monotonic.HyperHeap.hmap", "equation_FStar.Monotonic.HyperStack.is_tip", "equation_FStar.Monotonic.HyperStack.is_wf_with_ctr_and_tip", "equation_FStar.Monotonic.HyperStack.mem", "equation_FStar.UInt.fits", "equation_FStar.UInt.max_int", "equation_FStar.UInt.min_int", "equation_FStar.UInt.size", "equation_FStar.UInt.uint_t", "equation_Hacl.Bignum.AlmostMontExponentiation.a_spec", "equation_Hacl.Bignum.AlmostMontExponentiation.bn_exp_almost_mont_pre", "equation_Hacl.Bignum.AlmostMontExponentiation.linv", "equation_Hacl.Bignum.AlmostMontExponentiation.linv_ctx", "equation_Hacl.Bignum.AlmostMontExponentiation.mk_bn_almost_mont_concrete_ops", "equation_Hacl.Bignum.AlmostMontExponentiation.mk_to_nat_mont_ll_comm_monoid", "equation_Hacl.Bignum.AlmostMontExponentiation.refl", "equation_Hacl.Bignum.Definitions.blocks0", "equation_Hacl.Bignum.Definitions.bn_v", "equation_Hacl.Bignum.Definitions.lbignum", "equation_Hacl.Bignum.Definitions.limb", "equation_Hacl.Bignum.Definitions.limb_t", "equation_Hacl.Bignum.meta_len", "equation_Hacl.Impl.Exponentiation.inttype_a", "equation_Hacl.Spec.Bignum.Definitions.blocks0", "equation_Hacl.Spec.Bignum.Definitions.bn_v", "equation_Hacl.Spec.Bignum.Definitions.lbignum", "equation_Hacl.Spec.Bignum.Definitions.limb", "equation_Hacl.Spec.Bignum.Definitions.limb_t", "equation_Hacl.Spec.Bignum.Montgomery.bn_mont_pre", "equation_Hacl.Spec.Exponentiation.Lemmas.mk_nat_mont_ll_comm_monoid", "equation_Hacl.Spec.Montgomery.Lemmas.mont_pre", "equation_Lib.Buffer.as_seq", "equation_Lib.Buffer.buffer_t", "equation_Lib.Buffer.disjoint", "equation_Lib.Buffer.lbuffer_t", "equation_Lib.Buffer.length", "equation_Lib.Buffer.live", "equation_Lib.Buffer.loc", "equation_Lib.Buffer.modifies", "equation_Lib.Buffer.op_Bar_Plus_Bar", "equation_Lib.Buffer.union", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.int_t", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.pub_int_t", "equation_Lib.IntTypes.pub_int_v", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_LowStar.Buffer.buffer", "equation_LowStar.Buffer.trivial_preorder", "equation_LowStar.Monotonic.Buffer.length", "equation_Prims.nat", "fuel_guarded_inversion_Hacl.Bignum.AlmostMontgomery.almost_mont", "function_token_typing_FStar.Monotonic.Heap.heap", "function_token_typing_Prims.__cache_version_number__", "int_typing", "kinding_Hacl.Impl.Exponentiation.to_comm_monoid@tok", "lemma_FStar.Ghost.reveal_hide", "lemma_FStar.HyperStack.ST.lemma_equal_domains_trans", "lemma_FStar.Map.lemma_ContainsDom", "lemma_FStar.UInt.pow2_values", "lemma_FStar.UInt32.uv_inv", "lemma_FStar.UInt32.vu_inv", "lemma_Lib.IntTypes.eq_lemma", "lemma_LowStar.Monotonic.Buffer.address_liveness_insensitive_buffer", "lemma_LowStar.Monotonic.Buffer.loc_disjoint_sym_", "lemma_LowStar.Monotonic.Buffer.loc_includes_refl", "lemma_LowStar.Monotonic.Buffer.loc_includes_union_l_", "lemma_LowStar.Monotonic.Buffer.loc_union_comm", "lemma_LowStar.Monotonic.Buffer.modifies_buffer_elim", "lemma_LowStar.Monotonic.Buffer.modifies_liveness_insensitive_buffer_weak", "lemma_LowStar.Monotonic.Buffer.modifies_trans_linear", "primitive_Prims.op_Addition", "primitive_Prims.op_AmpAmp", "primitive_Prims.op_Division", "primitive_Prims.op_Equality", "primitive_Prims.op_LessThan", "primitive_Prims.op_LessThanOrEqual", "primitive_Prims.op_Modulus", "primitive_Prims.op_Subtraction", "proj_equation_Hacl.Bignum.Mkbn_len", "proj_equation_Hacl.Impl.Exponentiation.Mkconcrete_ops_to", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_a_spec", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_comm_monoid", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_linv", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_linv_ctx", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_refl", "proj_equation_Lib.Exponentiation.Mkcomm_monoid_one", "projection_inverse_BoxBool_proj_0", "projection_inverse_BoxInt_proj_0", "projection_inverse_Hacl.Impl.Exponentiation.Mkconcrete_ops_to", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_a_spec", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_comm_monoid", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_linv", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_linv_ctx", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_refl", "projection_inverse_Lib.Exponentiation.Mkcomm_monoid_one", "refinement_interpretation_Tm_refine_05e15190c946858f68c69156f585f95a", "refinement_interpretation_Tm_refine_06eb4f1fa9612b97cc2b633a94839814", "refinement_interpretation_Tm_refine_0ea1fba779ad5718e28476faeef94d56", "refinement_interpretation_Tm_refine_0ec011aea9f93256a3547ad9f0c667f1", "refinement_interpretation_Tm_refine_1395e0201fbf96e7fbf818c2d2e2ecb4", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_67a039288bce0d69806d550a655b3d66", "refinement_interpretation_Tm_refine_7ba72209ebfc4b6df6549d7db2d3b27b", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_9d3fd79fd314167f1a9c213a188da3ec", "refinement_interpretation_Tm_refine_9d89bf7b57667578cd0e1f4470daef3b", "refinement_interpretation_Tm_refine_cfc41488cee641ca406ae764563b3947", "refinement_interpretation_Tm_refine_cfc744b198940c21e3f980c86ac17a92", "refinement_interpretation_Tm_refine_e0bf359ff1d1900bf59fcc607bae4d56", "refinement_interpretation_Tm_refine_e9dde3ccbc0931573fbdc49eeca8c028", "refinement_interpretation_Tm_refine_f13070840248fced9d9d60d77bdae3ec", "token_correspondence_Hacl.Bignum.AlmostMontExponentiation.linv", "token_correspondence_Hacl.Bignum.AlmostMontExponentiation.linv_ctx", "token_correspondence_Hacl.Bignum.AlmostMontExponentiation.refl", "token_correspondence_Hacl.Impl.Exponentiation.__proj__Mkto_comm_monoid__item__linv", "token_correspondence_Hacl.Impl.Exponentiation.__proj__Mkto_comm_monoid__item__linv_ctx", "token_correspondence_Hacl.Impl.Exponentiation.__proj__Mkto_comm_monoid__item__refl", "typing_FStar.Map.contains", "typing_FStar.Monotonic.HyperHeap.rid", "typing_FStar.Monotonic.HyperStack.get_hmap", "typing_FStar.Monotonic.HyperStack.get_tip", "typing_FStar.UInt32.uint_to_t", "typing_FStar.UInt32.v", "typing_Hacl.Bignum.AlmostMontExponentiation.mk_to_nat_mont_ll_comm_monoid", "typing_Hacl.Bignum.AlmostMontgomery.__proj__Mkalmost_mont__item__bn", "typing_Hacl.Bignum.Definitions.limb", "typing_Hacl.Bignum.__proj__Mkbn__item__len", "typing_Lib.Buffer.as_seq", "typing_Lib.Buffer.length", "typing_Lib.Buffer.loc", "typing_Lib.Buffer.op_Bar_Plus_Bar", "typing_Lib.IntTypes.bits", "typing_Lib.IntTypes.mk_int", "typing_Lib.IntTypes.v", "typing_Lib.Sequence.lseq", "typing_LowStar.Buffer.trivial_preorder", "typing_LowStar.Monotonic.Buffer.len", "typing_tok_Lib.Buffer.MUT@tok", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.SEC@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "a39e7ff6a968728836559ca5646b0d16" ], [ "Hacl.Bignum.AlmostMontExponentiation.bn_exp_almost_mont_fw_vartime", 1, 0, 0, [ "@query" ], 0, "ae2ec07eefd5483dfe889fcbb1054e12" ], [ "Hacl.Bignum.AlmostMontExponentiation.bn_exp_almost_mont_fw_vartime", 2, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.S16", "constructor_distinct_Lib.IntTypes.S32", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U1", "constructor_distinct_Lib.IntTypes.U16", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U64", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U64@tok", "equation_Hacl.Bignum.Definitions.limb_t", "equation_Hacl.Spec.Bignum.Definitions.limb_t", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_Prims.nat", "fuel_guarded_inversion_Hacl.Bignum.AlmostMontgomery.almost_mont", "int_inversion", "lemma_FStar.UInt.pow2_values", "lemma_Lib.IntTypes.v_mk_int", "primitive_Prims.op_Subtraction", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_84735bdd52b049907af6ab48f2782d17", "refinement_interpretation_Tm_refine_cfc744b198940c21e3f980c86ac17a92", "typing_Lib.IntTypes.bits", "typing_Lib.IntTypes.v", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "59eb4628b61b1d0efcda4cff67f1a321" ], [ "Hacl.Bignum.AlmostMontExponentiation.bn_exp_almost_mont_fw_vartime", 3, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "Prims_pretyping_ae567c2fb75be05905677af440075565", "b2t_def", "bool_inversion", "constructor_distinct_Lib.Buffer.MUT", "constructor_distinct_Lib.IntTypes.PUB", "constructor_distinct_Lib.IntTypes.S16", "constructor_distinct_Lib.IntTypes.S32", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U16", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U64", "constructor_distinct_Lib.IntTypes.U8", "eq2-interp", "equality_tok_Lib.Buffer.MUT@tok", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.SEC@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U64@tok", "equation_FStar.Monotonic.HyperHeap.hmap", "equation_FStar.Monotonic.HyperStack.is_tip", "equation_FStar.Monotonic.HyperStack.is_wf_with_ctr_and_tip", "equation_FStar.Monotonic.HyperStack.mem", "equation_FStar.UInt.fits", "equation_FStar.UInt.max_int", "equation_FStar.UInt.min_int", "equation_FStar.UInt.size", "equation_FStar.UInt.uint_t", "equation_Hacl.Bignum.AlmostMontExponentiation.a_spec", "equation_Hacl.Bignum.AlmostMontExponentiation.bn_exp_almost_mont_pre", "equation_Hacl.Bignum.AlmostMontExponentiation.linv", "equation_Hacl.Bignum.AlmostMontExponentiation.linv_ctx", "equation_Hacl.Bignum.AlmostMontExponentiation.mk_bn_almost_mont_concrete_ops", "equation_Hacl.Bignum.AlmostMontExponentiation.mk_to_nat_mont_ll_comm_monoid", "equation_Hacl.Bignum.AlmostMontExponentiation.refl", "equation_Hacl.Bignum.Definitions.blocks0", "equation_Hacl.Bignum.Definitions.bn_v", "equation_Hacl.Bignum.Definitions.lbignum", "equation_Hacl.Bignum.Definitions.limb", "equation_Hacl.Bignum.Definitions.limb_t", "equation_Hacl.Bignum.meta_len", "equation_Hacl.Impl.Exponentiation.inttype_a", "equation_Hacl.Spec.Bignum.Definitions.blocks0", "equation_Hacl.Spec.Bignum.Definitions.bn_v", "equation_Hacl.Spec.Bignum.Definitions.lbignum", "equation_Hacl.Spec.Bignum.Definitions.limb", "equation_Hacl.Spec.Bignum.Definitions.limb_t", "equation_Hacl.Spec.Bignum.Montgomery.bn_mont_pre", "equation_Hacl.Spec.Exponentiation.Lemmas.mk_nat_mont_ll_comm_monoid", "equation_Hacl.Spec.Montgomery.Lemmas.mont_pre", "equation_Lib.Buffer.as_seq", "equation_Lib.Buffer.buffer_t", "equation_Lib.Buffer.disjoint", "equation_Lib.Buffer.lbuffer_t", "equation_Lib.Buffer.length", "equation_Lib.Buffer.live", "equation_Lib.Buffer.loc", "equation_Lib.Buffer.modifies", "equation_Lib.Buffer.op_Bar_Plus_Bar", "equation_Lib.Buffer.union", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.int_t", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.pub_int_t", "equation_Lib.IntTypes.pub_int_v", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_LowStar.Buffer.buffer", "equation_LowStar.Buffer.trivial_preorder", "equation_LowStar.Monotonic.Buffer.length", "equation_Prims.nat", "fuel_guarded_inversion_Hacl.Bignum.AlmostMontgomery.almost_mont", "function_token_typing_FStar.Monotonic.Heap.heap", "function_token_typing_Prims.__cache_version_number__", "int_typing", "kinding_Hacl.Impl.Exponentiation.to_comm_monoid@tok", "lemma_FStar.Ghost.reveal_hide", "lemma_FStar.HyperStack.ST.lemma_equal_domains_trans", "lemma_FStar.Map.lemma_ContainsDom", "lemma_FStar.UInt.pow2_values", "lemma_FStar.UInt32.uv_inv", "lemma_FStar.UInt32.vu_inv", "lemma_Lib.IntTypes.eq_lemma", "lemma_LowStar.Monotonic.Buffer.address_liveness_insensitive_buffer", "lemma_LowStar.Monotonic.Buffer.loc_disjoint_sym_", "lemma_LowStar.Monotonic.Buffer.loc_includes_refl", "lemma_LowStar.Monotonic.Buffer.loc_includes_union_l_", "lemma_LowStar.Monotonic.Buffer.loc_union_comm", "lemma_LowStar.Monotonic.Buffer.modifies_buffer_elim", "lemma_LowStar.Monotonic.Buffer.modifies_liveness_insensitive_buffer_weak", "lemma_LowStar.Monotonic.Buffer.modifies_loc_includes", "lemma_LowStar.Monotonic.Buffer.modifies_trans_linear", "primitive_Prims.op_Addition", "primitive_Prims.op_AmpAmp", "primitive_Prims.op_Division", "primitive_Prims.op_Equality", "primitive_Prims.op_LessThan", "primitive_Prims.op_LessThanOrEqual", "primitive_Prims.op_Modulus", "primitive_Prims.op_Subtraction", "proj_equation_Hacl.Bignum.Mkbn_len", "proj_equation_Hacl.Impl.Exponentiation.Mkconcrete_ops_to", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_a_spec", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_comm_monoid", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_linv", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_linv_ctx", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_refl", "proj_equation_Lib.Exponentiation.Mkcomm_monoid_one", "projection_inverse_BoxBool_proj_0", "projection_inverse_BoxInt_proj_0", "projection_inverse_Hacl.Impl.Exponentiation.Mkconcrete_ops_to", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_a_spec", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_comm_monoid", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_linv", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_linv_ctx", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_refl", "projection_inverse_Lib.Exponentiation.Mkcomm_monoid_one", "refinement_interpretation_Tm_refine_05e15190c946858f68c69156f585f95a", "refinement_interpretation_Tm_refine_06eb4f1fa9612b97cc2b633a94839814", "refinement_interpretation_Tm_refine_0ea1fba779ad5718e28476faeef94d56", "refinement_interpretation_Tm_refine_0ec011aea9f93256a3547ad9f0c667f1", "refinement_interpretation_Tm_refine_1395e0201fbf96e7fbf818c2d2e2ecb4", "refinement_interpretation_Tm_refine_3d48d5efed329539f1d9ee9a2aed52ee", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_67a039288bce0d69806d550a655b3d66", "refinement_interpretation_Tm_refine_7ba72209ebfc4b6df6549d7db2d3b27b", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_84735bdd52b049907af6ab48f2782d17", "refinement_interpretation_Tm_refine_9d3fd79fd314167f1a9c213a188da3ec", "refinement_interpretation_Tm_refine_9d89bf7b57667578cd0e1f4470daef3b", "refinement_interpretation_Tm_refine_cfc41488cee641ca406ae764563b3947", "refinement_interpretation_Tm_refine_cfc744b198940c21e3f980c86ac17a92", "refinement_interpretation_Tm_refine_e9dde3ccbc0931573fbdc49eeca8c028", "refinement_interpretation_Tm_refine_f13070840248fced9d9d60d77bdae3ec", "token_correspondence_Hacl.Bignum.AlmostMontExponentiation.linv", "token_correspondence_Hacl.Bignum.AlmostMontExponentiation.linv_ctx", "token_correspondence_Hacl.Bignum.AlmostMontExponentiation.refl", "token_correspondence_Hacl.Impl.Exponentiation.__proj__Mkto_comm_monoid__item__linv", "token_correspondence_Hacl.Impl.Exponentiation.__proj__Mkto_comm_monoid__item__linv_ctx", "token_correspondence_Hacl.Impl.Exponentiation.__proj__Mkto_comm_monoid__item__refl", "typing_FStar.Map.contains", "typing_FStar.Monotonic.HyperHeap.rid", "typing_FStar.Monotonic.HyperStack.get_hmap", "typing_FStar.Monotonic.HyperStack.get_tip", "typing_FStar.UInt32.uint_to_t", "typing_FStar.UInt32.v", "typing_Hacl.Bignum.AlmostMontExponentiation.mk_to_nat_mont_ll_comm_monoid", "typing_Hacl.Bignum.AlmostMontgomery.__proj__Mkalmost_mont__item__bn", "typing_Hacl.Bignum.Definitions.limb", "typing_Hacl.Bignum.__proj__Mkbn__item__len", "typing_Lib.Buffer.as_seq", "typing_Lib.Buffer.length", "typing_Lib.Buffer.loc", "typing_Lib.Buffer.op_Bar_Plus_Bar", "typing_Lib.IntTypes.bits", "typing_Lib.IntTypes.mk_int", "typing_Lib.IntTypes.v", "typing_Lib.Sequence.lseq", "typing_LowStar.Buffer.trivial_preorder", "typing_LowStar.Monotonic.Buffer.len", "typing_tok_Lib.Buffer.MUT@tok", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.SEC@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "1ad9cd45c767cf14fe9f8032cfaaca31" ], [ "Hacl.Bignum.AlmostMontExponentiation.bn_exp_almost_mont_fw_consttime", 1, 0, 0, [ "@query" ], 0, "96464dcc999f1faac4b71c8d4bb7b276" ], [ "Hacl.Bignum.AlmostMontExponentiation.bn_exp_almost_mont_fw_consttime", 2, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.S16", "constructor_distinct_Lib.IntTypes.S32", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U1", "constructor_distinct_Lib.IntTypes.U16", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U64", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U64@tok", "equation_Hacl.Bignum.Definitions.limb_t", "equation_Hacl.Spec.Bignum.Definitions.limb_t", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_Prims.nat", "fuel_guarded_inversion_Hacl.Bignum.AlmostMontgomery.almost_mont", "int_inversion", "lemma_FStar.UInt.pow2_values", "lemma_Lib.IntTypes.v_mk_int", "primitive_Prims.op_Subtraction", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_84735bdd52b049907af6ab48f2782d17", "refinement_interpretation_Tm_refine_cfc744b198940c21e3f980c86ac17a92", "typing_Lib.IntTypes.bits", "typing_Lib.IntTypes.v", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "428ede88f8af78e655ce0349e15f4f31" ], [ "Hacl.Bignum.AlmostMontExponentiation.bn_exp_almost_mont_fw_consttime", 3, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "Prims_pretyping_ae567c2fb75be05905677af440075565", "b2t_def", "bool_inversion", "constructor_distinct_Lib.Buffer.MUT", "constructor_distinct_Lib.IntTypes.PUB", "constructor_distinct_Lib.IntTypes.S16", "constructor_distinct_Lib.IntTypes.S32", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U16", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U64", "constructor_distinct_Lib.IntTypes.U8", "eq2-interp", "equality_tok_Lib.Buffer.MUT@tok", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.SEC@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U64@tok", "equation_FStar.Monotonic.HyperHeap.hmap", "equation_FStar.Monotonic.HyperStack.is_tip", "equation_FStar.Monotonic.HyperStack.is_wf_with_ctr_and_tip", "equation_FStar.Monotonic.HyperStack.mem", "equation_FStar.UInt.fits", "equation_FStar.UInt.max_int", "equation_FStar.UInt.min_int", "equation_FStar.UInt.size", "equation_FStar.UInt.uint_t", "equation_Hacl.Bignum.AlmostMontExponentiation.a_spec", "equation_Hacl.Bignum.AlmostMontExponentiation.bn_exp_almost_mont_pre", "equation_Hacl.Bignum.AlmostMontExponentiation.linv", "equation_Hacl.Bignum.AlmostMontExponentiation.linv_ctx", "equation_Hacl.Bignum.AlmostMontExponentiation.mk_bn_almost_mont_concrete_ops", "equation_Hacl.Bignum.AlmostMontExponentiation.mk_to_nat_mont_ll_comm_monoid", "equation_Hacl.Bignum.AlmostMontExponentiation.refl", "equation_Hacl.Bignum.Definitions.blocks0", "equation_Hacl.Bignum.Definitions.bn_v", "equation_Hacl.Bignum.Definitions.lbignum", "equation_Hacl.Bignum.Definitions.limb", "equation_Hacl.Bignum.Definitions.limb_t", "equation_Hacl.Bignum.meta_len", "equation_Hacl.Impl.Exponentiation.inttype_a", "equation_Hacl.Spec.Bignum.Definitions.blocks0", "equation_Hacl.Spec.Bignum.Definitions.bn_v", "equation_Hacl.Spec.Bignum.Definitions.lbignum", "equation_Hacl.Spec.Bignum.Definitions.limb", "equation_Hacl.Spec.Bignum.Definitions.limb_t", "equation_Hacl.Spec.Bignum.Montgomery.bn_mont_pre", "equation_Hacl.Spec.Exponentiation.Lemmas.mk_nat_mont_ll_comm_monoid", "equation_Hacl.Spec.Montgomery.Lemmas.mont_pre", "equation_Lib.Buffer.as_seq", "equation_Lib.Buffer.buffer_t", "equation_Lib.Buffer.disjoint", "equation_Lib.Buffer.lbuffer_t", "equation_Lib.Buffer.length", "equation_Lib.Buffer.live", "equation_Lib.Buffer.loc", "equation_Lib.Buffer.modifies", "equation_Lib.Buffer.op_Bar_Plus_Bar", "equation_Lib.Buffer.union", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.int_t", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.pub_int_t", "equation_Lib.IntTypes.pub_int_v", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_LowStar.Buffer.buffer", "equation_LowStar.Buffer.trivial_preorder", "equation_LowStar.Monotonic.Buffer.length", "equation_Prims.nat", "fuel_guarded_inversion_Hacl.Bignum.AlmostMontgomery.almost_mont", "function_token_typing_FStar.Monotonic.Heap.heap", "function_token_typing_Prims.__cache_version_number__", "int_typing", "kinding_Hacl.Impl.Exponentiation.to_comm_monoid@tok", "lemma_FStar.Ghost.reveal_hide", "lemma_FStar.HyperStack.ST.lemma_equal_domains_trans", "lemma_FStar.Map.lemma_ContainsDom", "lemma_FStar.UInt.pow2_values", "lemma_FStar.UInt32.uv_inv", "lemma_FStar.UInt32.vu_inv", "lemma_Lib.IntTypes.eq_lemma", "lemma_LowStar.Monotonic.Buffer.address_liveness_insensitive_buffer", "lemma_LowStar.Monotonic.Buffer.loc_disjoint_sym_", "lemma_LowStar.Monotonic.Buffer.loc_includes_refl", "lemma_LowStar.Monotonic.Buffer.loc_includes_union_l_", "lemma_LowStar.Monotonic.Buffer.loc_union_comm", "lemma_LowStar.Monotonic.Buffer.modifies_buffer_elim", "lemma_LowStar.Monotonic.Buffer.modifies_liveness_insensitive_buffer_weak", "lemma_LowStar.Monotonic.Buffer.modifies_loc_includes", "lemma_LowStar.Monotonic.Buffer.modifies_trans_linear", "primitive_Prims.op_Addition", "primitive_Prims.op_AmpAmp", "primitive_Prims.op_Division", "primitive_Prims.op_Equality", "primitive_Prims.op_LessThan", "primitive_Prims.op_LessThanOrEqual", "primitive_Prims.op_Modulus", "primitive_Prims.op_Subtraction", "proj_equation_Hacl.Bignum.Mkbn_len", "proj_equation_Hacl.Impl.Exponentiation.Mkconcrete_ops_to", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_a_spec", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_comm_monoid", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_linv", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_linv_ctx", "proj_equation_Hacl.Impl.Exponentiation.Mkto_comm_monoid_refl", "proj_equation_Lib.Exponentiation.Mkcomm_monoid_one", "projection_inverse_BoxBool_proj_0", "projection_inverse_BoxInt_proj_0", "projection_inverse_Hacl.Impl.Exponentiation.Mkconcrete_ops_to", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_a_spec", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_comm_monoid", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_linv", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_linv_ctx", "projection_inverse_Hacl.Impl.Exponentiation.Mkto_comm_monoid_refl", "projection_inverse_Lib.Exponentiation.Mkcomm_monoid_one", "refinement_interpretation_Tm_refine_05e15190c946858f68c69156f585f95a", "refinement_interpretation_Tm_refine_06eb4f1fa9612b97cc2b633a94839814", "refinement_interpretation_Tm_refine_0ea1fba779ad5718e28476faeef94d56", "refinement_interpretation_Tm_refine_0ec011aea9f93256a3547ad9f0c667f1", "refinement_interpretation_Tm_refine_1395e0201fbf96e7fbf818c2d2e2ecb4", "refinement_interpretation_Tm_refine_3d48d5efed329539f1d9ee9a2aed52ee", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_67a039288bce0d69806d550a655b3d66", "refinement_interpretation_Tm_refine_7ba72209ebfc4b6df6549d7db2d3b27b", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_84735bdd52b049907af6ab48f2782d17", "refinement_interpretation_Tm_refine_9d3fd79fd314167f1a9c213a188da3ec", "refinement_interpretation_Tm_refine_9d89bf7b57667578cd0e1f4470daef3b", "refinement_interpretation_Tm_refine_cfc41488cee641ca406ae764563b3947", "refinement_interpretation_Tm_refine_cfc744b198940c21e3f980c86ac17a92", "refinement_interpretation_Tm_refine_e9dde3ccbc0931573fbdc49eeca8c028", "refinement_interpretation_Tm_refine_f13070840248fced9d9d60d77bdae3ec", "token_correspondence_Hacl.Bignum.AlmostMontExponentiation.linv", "token_correspondence_Hacl.Bignum.AlmostMontExponentiation.linv_ctx", "token_correspondence_Hacl.Bignum.AlmostMontExponentiation.refl", "token_correspondence_Hacl.Impl.Exponentiation.__proj__Mkto_comm_monoid__item__linv", "token_correspondence_Hacl.Impl.Exponentiation.__proj__Mkto_comm_monoid__item__linv_ctx", "token_correspondence_Hacl.Impl.Exponentiation.__proj__Mkto_comm_monoid__item__refl", "typing_FStar.Map.contains", "typing_FStar.Monotonic.HyperHeap.rid", "typing_FStar.Monotonic.HyperStack.get_hmap", "typing_FStar.Monotonic.HyperStack.get_tip", "typing_FStar.UInt32.uint_to_t", "typing_FStar.UInt32.v", "typing_Hacl.Bignum.AlmostMontExponentiation.mk_to_nat_mont_ll_comm_monoid", "typing_Hacl.Bignum.AlmostMontgomery.__proj__Mkalmost_mont__item__bn", "typing_Hacl.Bignum.Definitions.limb", "typing_Hacl.Bignum.__proj__Mkbn__item__len", "typing_Lib.Buffer.as_seq", "typing_Lib.Buffer.length", "typing_Lib.Buffer.loc", "typing_Lib.Buffer.op_Bar_Plus_Bar", "typing_Lib.IntTypes.bits", "typing_Lib.IntTypes.mk_int", "typing_Lib.IntTypes.v", "typing_Lib.Sequence.lseq", "typing_LowStar.Buffer.trivial_preorder", "typing_LowStar.Monotonic.Buffer.len", "typing_tok_Lib.Buffer.MUT@tok", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.SEC@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "e4c4543766780215b4ce0cf9a52e28b3" ], [ "Hacl.Bignum.AlmostMontExponentiation.bn_exp_almost_mont_vartime", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.S16", "constructor_distinct_Lib.IntTypes.S32", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U1", "constructor_distinct_Lib.IntTypes.U16", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U64", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U64@tok", "equation_Hacl.Bignum.Definitions.limb_t", "equation_Hacl.Spec.Bignum.Definitions.limb_t", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Prims.nat", "fuel_guarded_inversion_Hacl.Bignum.AlmostMontgomery.almost_mont", "int_inversion", "int_typing", "lemma_FStar.UInt.pow2_values", "lemma_Lib.IntTypes.v_mk_int", "primitive_Prims.op_Subtraction", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_cfc744b198940c21e3f980c86ac17a92", "typing_Lib.IntTypes.bits", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "f101bdf466005a70d492a2474f2828be" ], [ "Hacl.Bignum.AlmostMontExponentiation.bn_exp_almost_mont_vartime", 2, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "b2t_def", "bool_inversion", "constructor_distinct_Lib.Buffer.MUT", "constructor_distinct_Lib.IntTypes.PUB", "constructor_distinct_Lib.IntTypes.S16", "constructor_distinct_Lib.IntTypes.S32", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U16", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U64", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.Buffer.MUT@tok", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U64@tok", "equation_FStar.Monotonic.HyperHeap.hmap", "equation_FStar.Monotonic.HyperStack.is_tip", "equation_FStar.Monotonic.HyperStack.is_wf_with_ctr_and_tip", "equation_FStar.Monotonic.HyperStack.mem", "equation_FStar.UInt.fits", "equation_FStar.UInt.max_int", "equation_FStar.UInt.min_int", "equation_FStar.UInt.size", "equation_FStar.UInt.uint_t", "equation_Hacl.Bignum.Definitions.lbignum", "equation_Hacl.Bignum.Definitions.limb", "equation_Hacl.Bignum.Definitions.limb_t", "equation_Hacl.Bignum.meta_len", "equation_Hacl.Spec.Bignum.Definitions.limb_t", "equation_Hacl.Spec.Bignum.MontExponentiation.bn_exp_mont_vartime_threshold", "equation_Lib.Buffer.buffer_t", "equation_Lib.Buffer.lbuffer_t", "equation_Lib.Buffer.length", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.pub_int_v", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_LowStar.Buffer.buffer", "equation_LowStar.Buffer.trivial_preorder", "equation_LowStar.Monotonic.Buffer.length", "equation_Prims.nat", "fuel_guarded_inversion_Hacl.Bignum.AlmostMontgomery.almost_mont", "function_token_typing_FStar.Monotonic.Heap.heap", "int_typing", "lemma_FStar.Map.lemma_ContainsDom", "lemma_FStar.UInt.pow2_values", "lemma_FStar.UInt32.vu_inv", "lemma_Lib.IntTypes.pow2_4", "lemma_LowStar.Monotonic.Buffer.length_null_1", "lemma_LowStar.Monotonic.Buffer.length_null_2", "primitive_Prims.op_AmpAmp", "primitive_Prims.op_LessThanOrEqual", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "proj_equation_Hacl.Bignum.Mkbn_len", "projection_inverse_BoxBool_proj_0", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_05e15190c946858f68c69156f585f95a", "refinement_interpretation_Tm_refine_06eb4f1fa9612b97cc2b633a94839814", "refinement_interpretation_Tm_refine_365abba901205a01d0ef28ebf2198c47", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_9d89bf7b57667578cd0e1f4470daef3b", "refinement_interpretation_Tm_refine_cfc41488cee641ca406ae764563b3947", "refinement_interpretation_Tm_refine_cfc744b198940c21e3f980c86ac17a92", "refinement_interpretation_Tm_refine_f13070840248fced9d9d60d77bdae3ec", "typing_FStar.Map.contains", "typing_FStar.Monotonic.HyperHeap.rid", "typing_FStar.Monotonic.HyperHeap.rid_freeable", "typing_FStar.Monotonic.HyperHeap.root", "typing_FStar.Monotonic.HyperStack.get_hmap", "typing_FStar.Monotonic.HyperStack.get_tip", "typing_FStar.UInt.fits", "typing_FStar.UInt32.v", "typing_Hacl.Bignum.AlmostMontgomery.__proj__Mkalmost_mont__item__bn", "typing_Hacl.Bignum.Definitions.limb", "typing_Hacl.Bignum.__proj__Mkbn__item__len", "typing_Lib.Buffer.length", "typing_Lib.IntTypes.v", "typing_LowStar.Buffer.trivial_preorder", "typing_LowStar.Monotonic.Buffer.len", "typing_tok_Lib.Buffer.MUT@tok", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "0e8a2d7d44d7d3f3773a955ed9aa5fe4" ], [ "Hacl.Bignum.AlmostMontExponentiation.bn_exp_almost_mont_consttime", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.S16", "constructor_distinct_Lib.IntTypes.S32", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U1", "constructor_distinct_Lib.IntTypes.U16", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U64", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U64@tok", "equation_Hacl.Bignum.Definitions.limb_t", "equation_Hacl.Spec.Bignum.Definitions.limb_t", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Prims.nat", "fuel_guarded_inversion_Hacl.Bignum.AlmostMontgomery.almost_mont", "int_inversion", "int_typing", "lemma_FStar.UInt.pow2_values", "lemma_Lib.IntTypes.v_mk_int", "primitive_Prims.op_Subtraction", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_cfc744b198940c21e3f980c86ac17a92", "typing_Lib.IntTypes.bits", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "547699cb1e244e34c51ef6c8c2a2fbf8" ], [ "Hacl.Bignum.AlmostMontExponentiation.bn_exp_almost_mont_consttime", 2, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "b2t_def", "bool_inversion", "constructor_distinct_Lib.Buffer.MUT", "constructor_distinct_Lib.IntTypes.PUB", "constructor_distinct_Lib.IntTypes.S16", "constructor_distinct_Lib.IntTypes.S32", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U16", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U64", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.Buffer.MUT@tok", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U64@tok", "equation_FStar.Monotonic.HyperHeap.hmap", "equation_FStar.Monotonic.HyperStack.is_tip", "equation_FStar.Monotonic.HyperStack.is_wf_with_ctr_and_tip", "equation_FStar.Monotonic.HyperStack.mem", "equation_FStar.UInt.fits", "equation_FStar.UInt.max_int", "equation_FStar.UInt.min_int", "equation_FStar.UInt.size", "equation_FStar.UInt.uint_t", "equation_Hacl.Bignum.Definitions.lbignum", "equation_Hacl.Bignum.Definitions.limb", "equation_Hacl.Bignum.Definitions.limb_t", "equation_Hacl.Bignum.meta_len", "equation_Hacl.Spec.Bignum.Definitions.limb_t", "equation_Hacl.Spec.Bignum.MontExponentiation.bn_exp_mont_consttime_threshold", "equation_Lib.Buffer.buffer_t", "equation_Lib.Buffer.lbuffer_t", "equation_Lib.Buffer.length", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.pub_int_v", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_LowStar.Buffer.buffer", "equation_LowStar.Buffer.trivial_preorder", "equation_LowStar.Monotonic.Buffer.length", "equation_Prims.nat", "fuel_guarded_inversion_Hacl.Bignum.AlmostMontgomery.almost_mont", "function_token_typing_FStar.Monotonic.Heap.heap", "int_typing", "lemma_FStar.Map.lemma_ContainsDom", "lemma_FStar.UInt.pow2_values", "lemma_FStar.UInt32.vu_inv", "lemma_Lib.IntTypes.pow2_4", "lemma_LowStar.Monotonic.Buffer.length_null_1", "lemma_LowStar.Monotonic.Buffer.length_null_2", "primitive_Prims.op_AmpAmp", "primitive_Prims.op_LessThanOrEqual", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "proj_equation_Hacl.Bignum.Mkbn_len", "projection_inverse_BoxBool_proj_0", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_05e15190c946858f68c69156f585f95a", "refinement_interpretation_Tm_refine_06eb4f1fa9612b97cc2b633a94839814", "refinement_interpretation_Tm_refine_365abba901205a01d0ef28ebf2198c47", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_9d89bf7b57667578cd0e1f4470daef3b", "refinement_interpretation_Tm_refine_cfc41488cee641ca406ae764563b3947", "refinement_interpretation_Tm_refine_cfc744b198940c21e3f980c86ac17a92", "refinement_interpretation_Tm_refine_f13070840248fced9d9d60d77bdae3ec", "typing_FStar.Map.contains", "typing_FStar.Monotonic.HyperHeap.rid", "typing_FStar.Monotonic.HyperHeap.rid_freeable", "typing_FStar.Monotonic.HyperHeap.root", "typing_FStar.Monotonic.HyperStack.get_hmap", "typing_FStar.Monotonic.HyperStack.get_tip", "typing_FStar.UInt.fits", "typing_FStar.UInt32.v", "typing_Hacl.Bignum.AlmostMontgomery.__proj__Mkalmost_mont__item__bn", "typing_Hacl.Bignum.Definitions.limb", "typing_Hacl.Bignum.__proj__Mkbn__item__len", "typing_Lib.Buffer.length", "typing_Lib.IntTypes.v", "typing_LowStar.Buffer.trivial_preorder", "typing_LowStar.Monotonic.Buffer.len", "typing_tok_Lib.Buffer.MUT@tok", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "3cee7ee820d36daf2c9ca28c1089b300" ] ] ]