[ "\u001bå\u000e„k{Þz×'VjÔ\u001f\u0005\u0003", [ [ "Spec.Ed25519.PointOps.modp_sqrt_m1", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "equation_Prims.nat", "equation_Prims.pos", "equation_Spec.Curve25519.prime", "int_typing", "lemma_Spec.Curve25519.Lemmas.lemma_prime_value", "primitive_Prims.op_Division", "primitive_Prims.op_Subtraction", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "typing_Spec.Curve25519.prime" ], 0, "aa0a63c6d220ee1a1c3208218d5c1d2c" ], [ "Spec.Ed25519.PointOps.fexp", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "equation_Prims.nat", "equation_Prims.pos", "equation_Spec.Curve25519.prime", "int_typing", "lemma_Spec.Curve25519.Lemmas.lemma_prime_value", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5" ], 0, "e5ace7f7e0583f3f4a01ef906c129308" ], [ "Spec.Ed25519.PointOps.finv", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "equation_Prims.nat", "equation_Spec.Curve25519.prime", "int_typing", "lemma_Spec.Curve25519.Lemmas.lemma_prime_value", "primitive_Prims.op_Subtraction", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2" ], 0, "9f0e6cd4f4195a55ec7eace03c70127e" ], [ "Spec.Ed25519.PointOps.d", 1, 0, 0, [ "@query" ], 0, "4bfcde831f118bfcb62cdae086b369de" ], [ "Spec.Ed25519.PointOps.g_x", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "equation_Prims.nat", "equation_Spec.Curve25519.prime", "int_typing", "lemma_Spec.Curve25519.Lemmas.lemma_prime_value", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2" ], 0, "ccdbb2e44ba3025f10934949060e3acf" ], [ "Spec.Ed25519.PointOps.g_y", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "equation_Prims.nat", "equation_Spec.Curve25519.prime", "int_typing", "lemma_Spec.Curve25519.Lemmas.lemma_prime_value", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2" ], 0, "3f9f7765af413407a157721bb3c1dad2" ], [ "Spec.Ed25519.PointOps.g", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "equation_Prims.nat", "equation_Spec.Curve25519.prime", "int_typing", "lemma_Spec.Curve25519.Lemmas.lemma_prime_value", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2" ], 0, "fd8338278c8bc391e2af7572701ab2de" ], [ "Spec.Ed25519.PointOps.is_on_curve", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "equation_Prims.nat", "equation_Spec.Curve25519.prime", "int_typing", "lemma_Spec.Curve25519.Lemmas.lemma_prime_value", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2" ], 0, "ecf0d5dfaffd8042d69d7fa68dc62bfb" ], [ "Spec.Ed25519.PointOps.is_ext", 1, 0, 0, [ "@MaxIFuel_assumption", "@query", "equation_Prims.eqtype", "equation_Prims.nat", "equation_Spec.Curve25519.elem", "function_token_typing_Prims.int", "haseqTm_refine_542f9d4f129664613f2483a6c88bc7c2", "haseqTm_refine_c9f318957334bae90e9d8f370d26a655", "refinement_interpretation_Tm_refine_414d0a9f578ab0048252f8c8f552b99f" ], 0, "9f9fdb9de72054097772ce55823eba3b" ], [ "Spec.Ed25519.PointOps.aff_point_add", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "equation_Prims.nat", "equation_Spec.Curve25519.prime", "int_typing", "lemma_Spec.Curve25519.Lemmas.lemma_prime_value", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2" ], 0, "4bb9427cdbb3f904f391e7ec91ac4438" ], [ "Spec.Ed25519.PointOps.aff_point_double", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "equation_Prims.nat", "equation_Spec.Curve25519.prime", "int_typing", "lemma_Spec.Curve25519.Lemmas.lemma_prime_value", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2" ], 0, "387c9231752967dcca87eac57f6c294d" ], [ "Spec.Ed25519.PointOps.aff_point_negate", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "equation_Prims.nat", "equation_Spec.Curve25519.elem", "equation_Spec.Curve25519.prime", "int_typing", "lemma_Spec.Curve25519.Lemmas.lemma_prime_value", "primitive_Prims.op_Modulus", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_c9f318957334bae90e9d8f370d26a655" ], 0, "e3123a9b2e06bcea2c95f4ee6a8d957d" ], [ "Spec.Ed25519.PointOps.point_add", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "equation_Prims.nat", "equation_Spec.Curve25519.prime", "int_typing", "lemma_Spec.Curve25519.Lemmas.lemma_prime_value", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2" ], 0, "50be0ece37227f91c3d5c3e1cfe1b691" ], [ "Spec.Ed25519.PointOps.point_double", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "equation_Prims.nat", "equation_Spec.Curve25519.prime", "int_typing", "lemma_Spec.Curve25519.Lemmas.lemma_prime_value", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2" ], 0, "45abfa272c8900a570b6f792ebc19492" ], [ "Spec.Ed25519.PointOps.point_negate", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "equation_Prims.nat", "equation_Spec.Curve25519.elem", "equation_Spec.Curve25519.prime", "int_typing", "lemma_Spec.Curve25519.Lemmas.lemma_prime_value", "primitive_Prims.op_Modulus", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_c9f318957334bae90e9d8f370d26a655" ], 0, "0369c49f20e00a0baa26d36d06dfe64f" ], [ "Spec.Ed25519.PointOps.point_compress", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.S16", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U32", "equality_tok_Lib.IntTypes.U32@tok", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.unsigned", "equation_Lib.Sequence.length", "equation_Prims.nat", "equation_Spec.Curve25519.elem", "equation_Spec.Curve25519.fmul", "equation_Spec.Curve25519.op_Star_Percent", "equation_Spec.Curve25519.prime", "equation_Spec.Ed25519.PointOps.finv", "int_typing", "lemma_FStar.UInt.pow2_values", "lemma_Spec.Curve25519.Lemmas.lemma_pow2_256", "lemma_Spec.Curve25519.Lemmas.lemma_prime_value", "primitive_Prims.op_Addition", "primitive_Prims.op_Modulus", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_c9f318957334bae90e9d8f370d26a655", "typing_Lib.IntTypes.bits", "typing_Spec.Curve25519.op_Star_Percent", "typing_Spec.Ed25519.PointOps.finv", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "51d9c9971532c0032e9f3eeae87648e9" ], [ "Spec.Ed25519.PointOps.recover_x", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "equation_Prims.eqtype", "equation_Prims.nat", "equation_Spec.Curve25519.elem", "equation_Spec.Curve25519.prime", "equation_Spec.Ed25519.PointOps.d", "function_token_typing_Prims.int", "haseqTm_refine_542f9d4f129664613f2483a6c88bc7c2", "haseqTm_refine_c9f318957334bae90e9d8f370d26a655", "int_typing", "lemma_Spec.Curve25519.Lemmas.lemma_prime_value", "primitive_Prims.op_Addition", "primitive_Prims.op_Division", "primitive_Prims.op_GreaterThanOrEqual", "primitive_Prims.op_Modulus", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_414d0a9f578ab0048252f8c8f552b99f", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_c9f318957334bae90e9d8f370d26a655", "typing_Spec.Ed25519.PointOps.d" ], 0, "8df7f0a0a2c99bd52d17c7f58d24b136" ], [ "Spec.Ed25519.PointOps.point_decompress", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.U32", "equality_tok_Lib.IntTypes.U32@tok", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.unsigned", "equation_Prims.nat", "lemma_FStar.UInt.pow2_values", "primitive_Prims.op_Subtraction", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "typing_Lib.IntTypes.bits", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "337af9f2973076f763b939b56fc4becb" ], [ "Spec.Ed25519.PointOps.point_decompress", 2, 0, 0, [ "@MaxIFuel_assumption", "@query", "constructor_distinct_FStar.Pervasives.Native.None", "constructor_distinct_FStar.Pervasives.Native.Some", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.unsigned", "equation_Lib.Sequence.length", "equation_Lib.Sequence.lseq", "equation_Prims.nonzero", "equation_Spec.Curve25519.elem", "equation_Spec.Ed25519.PointOps.recover_x", "int_inversion", "primitive_Prims.op_GreaterThanOrEqual", "primitive_Prims.op_Modulus", "primitive_Prims.op_Multiply", "projection_inverse_BoxBool_proj_0", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_0766302b68bb44ab7aff8c4d8be0b46f", "refinement_interpretation_Tm_refine_d8d83307254a8900dd20598654272e42" ], 0, "22f2089ff46b7167d9bc7c2bd283bad9" ], [ "Spec.Ed25519.PointOps.point_equal", 1, 0, 0, [ "@MaxIFuel_assumption", "@query", "equation_Prims.eqtype", "equation_Prims.nat", "equation_Spec.Curve25519.elem", "function_token_typing_Prims.int", "haseqTm_refine_542f9d4f129664613f2483a6c88bc7c2", "haseqTm_refine_c9f318957334bae90e9d8f370d26a655", "refinement_interpretation_Tm_refine_414d0a9f578ab0048252f8c8f552b99f" ], 0, "042240e1686d11b3d81cf631b2b9a017" ] ] ]