[ "\u000fEÛžrMÄ0Aøv\u000e¾Á/=", [ [ "Spec.Frodo.KEM.Decaps.get_bp_c_matrices", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_Prims.nat", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.GaloisField.gf", "int_typing", "lemma_FStar.UInt.pow2_values", "lemma_Lib.IntTypes.v_mk_int", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_68ee6d2c8678eb431259a3d4f412550b", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Lib.IntTypes.bits", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.params_n", "typing_Spec.Frodo.Params.params_nbar", "typing_Spec.GaloisField.__proj__GF__item__t", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok", "typing_tok_Lib.IntTypes.U8@tok" ], 0, "8bc86311efadb30080ca57c38ee63b0b" ], [ "Spec.Frodo.KEM.Decaps.get_bp_c_matrices", 2, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_Lib.Sequence.lseq", "equation_Lib.Sequence.to_seq", "equation_Prims.nat", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.crypto_bytes", "equation_Spec.Frodo.Params.crypto_ciphertextbytes", "equation_Spec.Frodo.Params.params_logq", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.GaloisField.felem", "equation_Spec.GaloisField.gf", "int_inversion", "int_typing", "lemma_FStar.UInt.pow2_values", "lemma_Lib.IntTypes.v_mk_int", "primitive_Prims.op_Addition", "primitive_Prims.op_Division", "primitive_Prims.op_LessThanOrEqual", "primitive_Prims.op_Modulus", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxBool_proj_0", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_0ec011aea9f93256a3547ad9f0c667f1", "refinement_interpretation_Tm_refine_0f719333bc11ef2501ebea59c672959a", "refinement_interpretation_Tm_refine_34b30100a5c02dff9ce43c78afc27568", "refinement_interpretation_Tm_refine_4bd848be92ba16d00be9e5282694124c", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_d8d83307254a8900dd20598654272e42", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "refinement_interpretation_Tm_refine_e6f37c296aa97a039393c46ded1b8f91", "typing_Lib.IntTypes.bits", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.crypto_ciphertextbytes", "typing_Spec.GaloisField.__proj__GF__item__t", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok", "typing_tok_Lib.IntTypes.U8@tok" ], 0, "e855ee1c61d4b8fb91632b8040a06f8f" ], [ "Spec.Frodo.KEM.Decaps.get_bp_c_matrices", 3, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.unsigned", "equation_Lib.Sequence.lseq", "equation_Lib.Sequence.to_seq", "equation_Prims.nat", "equation_Prims.pos", "equation_Prims.squash", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.ct1bytes_len", "equation_Spec.Frodo.Params.ct2bytes_len", "equation_Spec.Frodo.Params.params_logq", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.Frodo.Params.uu___0", "equation_Spec.GaloisField.felem", "equation_Spec.GaloisField.gf", "fuel_guarded_inversion_Spec.Frodo.Params.frodo_alg", "function_token_typing_Spec.Frodo.Params.uu___0", "int_inversion", "inversion-interp", "lemma_FStar.UInt.pow2_values", "primitive_Prims.op_Addition", "primitive_Prims.op_Division", "primitive_Prims.op_LessThanOrEqual", "primitive_Prims.op_Modulus", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxBool_proj_0", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_2a039e1a99d9d2644dcc4f59d4a41871", "refinement_interpretation_Tm_refine_2de20c066034c13bf76e9c0b94f4806c", "refinement_interpretation_Tm_refine_44540322a5aeeac77ad2eb12638c2b4f", "refinement_interpretation_Tm_refine_4d92c9060bddd6749d00adb98eb66662", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_65e71441a9c851e4a25ea14f8e0e8f2e", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_ba74da3bbf8222b50eca41608af5dec0", "refinement_interpretation_Tm_refine_d8d83307254a8900dd20598654272e42", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Lib.IntTypes.bits", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.crypto_ciphertextbytes", "typing_Spec.Frodo.Params.ct1bytes_len", "typing_Spec.Frodo.Params.ct2bytes_len", "typing_Spec.Frodo.Params.params_logq", "typing_Spec.Frodo.Params.params_n", "typing_Spec.GaloisField.__proj__GF__item__t", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "2c31a1633dc55b3c231bbbe58dbcd269" ], [ "Spec.Frodo.KEM.Decaps.frodo_mu_decode", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.S16", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.SEC@tok", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_Prims.nat", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.GaloisField.gf", "int_typing", "lemma_FStar.UInt.pow2_values", "lemma_Lib.IntTypes.v_mk_int", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_48486e77aa5457d9a27027fef170c244", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Lib.IntTypes.bits", "typing_Lib.IntTypes.v", "typing_Spec.AES.gf8", "typing_Spec.AES.irred", "typing_Spec.GaloisField.__proj__GF__item__t", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.SEC@tok", "typing_tok_Lib.IntTypes.U32@tok", "typing_tok_Lib.IntTypes.U8@tok" ], 0, "507e6d4258da11cce9b91627838df17d" ], [ "Spec.Frodo.KEM.Decaps.frodo_mu_decode", 2, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.S16", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.SEC@tok", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_Prims.nat", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.GaloisField.gf", "int_typing", "lemma_FStar.UInt.pow2_values", "lemma_Lib.IntTypes.v_mk_int", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_48486e77aa5457d9a27027fef170c244", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_68ee6d2c8678eb431259a3d4f412550b", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Lib.IntTypes.bits", "typing_Lib.IntTypes.v", "typing_Spec.AES.gf8", "typing_Spec.AES.irred", "typing_Spec.Frodo.Params.params_n", "typing_Spec.GaloisField.__proj__GF__item__t", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.SEC@tok", "typing_tok_Lib.IntTypes.U32@tok", "typing_tok_Lib.IntTypes.U8@tok" ], 0, "13d224513588682bb5327c7d2a2cd8f8" ], [ "Spec.Frodo.KEM.Decaps.frodo_mu_decode", 3, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.U16", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.U16@tok", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.unsigned", "equation_Prims.nat", "equation_Prims.pos", "equation_Prims.squash", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.bytes_mu", "equation_Spec.Frodo.Params.params_extracted_bits", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.Frodo.Params.secretmatrixbytes_len", "equation_Spec.Frodo.Params.uu___0", "equation_Spec.GaloisField.gf", "fuel_guarded_inversion_Spec.Frodo.Params.frodo_alg", "function_token_typing_Spec.Frodo.Params.uu___0", "int_inversion", "int_typing", "inversion-interp", "lemma_FStar.UInt.pow2_values", "primitive_Prims.op_Division", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxBool_proj_0", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_2a039e1a99d9d2644dcc4f59d4a41871", "refinement_interpretation_Tm_refine_2de20c066034c13bf76e9c0b94f4806c", "refinement_interpretation_Tm_refine_44540322a5aeeac77ad2eb12638c2b4f", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Lib.IntTypes.bits", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.params_n", "typing_Spec.Frodo.Params.secretmatrixbytes_len", "typing_Spec.GaloisField.__proj__GF__item__t", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "dfafb8f9e7726dcda68c9030890ff05c" ], [ "Spec.Frodo.KEM.Decaps.get_bpp_cp_matrices_", 1, 0, 0, [ "@MaxIFuel_assumption", "@query", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Prims.pos", "equation_Prims.squash", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.bytes_mu", "equation_Spec.Frodo.Params.bytes_pkhash", "equation_Spec.Frodo.Params.bytes_seed_a", "equation_Spec.Frodo.Params.crypto_bytes", "equation_Spec.Frodo.Params.crypto_publickeybytes", "equation_Spec.Frodo.Params.crypto_secretkeybytes", "equation_Spec.Frodo.Params.params_extracted_bits", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.Frodo.Params.publicmatrixbytes_len", "equation_Spec.Frodo.Params.secretmatrixbytes_len", "equation_Spec.Frodo.Params.uu___0", "equation_Spec.GaloisField.gf", "fuel_guarded_inversion_Spec.Frodo.Params.frodo_alg", "function_token_typing_Spec.Frodo.Params.uu___0", "inversion-interp", "primitive_Prims.op_Addition", "primitive_Prims.op_Division", "primitive_Prims.op_Multiply", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_2a039e1a99d9d2644dcc4f59d4a41871", "refinement_interpretation_Tm_refine_2de20c066034c13bf76e9c0b94f4806c", "refinement_interpretation_Tm_refine_44540322a5aeeac77ad2eb12638c2b4f", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_c62e469265da3a3e9fd031e59569392a", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.bytes_mu", "typing_Spec.Frodo.Params.bytes_pkhash", "typing_Spec.Frodo.Params.crypto_secretkeybytes", "typing_Spec.Frodo.Params.params_extracted_bits", "typing_Spec.Frodo.Params.params_n", "typing_Spec.Frodo.Params.publicmatrixbytes_len", "typing_Spec.GaloisField.__proj__GF__item__t" ], 0, "b0cd5fc4e2f3c410d7bd1aacaea09e20" ], [ "Spec.Frodo.KEM.Decaps.get_bpp_cp_matrices_", 2, 0, 0, [ "@MaxIFuel_assumption", "@query", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Prims.pos", "equation_Prims.squash", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.bytes_pkhash", "equation_Spec.Frodo.Params.bytes_seed_a", "equation_Spec.Frodo.Params.crypto_bytes", "equation_Spec.Frodo.Params.crypto_publickeybytes", "equation_Spec.Frodo.Params.crypto_secretkeybytes", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.Frodo.Params.publicmatrixbytes_len", "equation_Spec.Frodo.Params.secretmatrixbytes_len", "equation_Spec.Frodo.Params.uu___0", "equation_Spec.GaloisField.gf", "fuel_guarded_inversion_Spec.Frodo.Params.frodo_alg", "function_token_typing_Spec.Frodo.Params.uu___0", "inversion-interp", "primitive_Prims.op_Addition", "primitive_Prims.op_Multiply", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_2a039e1a99d9d2644dcc4f59d4a41871", "refinement_interpretation_Tm_refine_2de20c066034c13bf76e9c0b94f4806c", "refinement_interpretation_Tm_refine_44540322a5aeeac77ad2eb12638c2b4f", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.bytes_pkhash", "typing_Spec.Frodo.Params.crypto_publickeybytes", "typing_Spec.Frodo.Params.crypto_secretkeybytes", "typing_Spec.Frodo.Params.params_n", "typing_Spec.Frodo.Params.publicmatrixbytes_len", "typing_Spec.Frodo.Params.secretmatrixbytes_len", "typing_Spec.GaloisField.__proj__GF__item__t" ], 0, "24379104ca636dcc8dd4e865e1e3877f" ], [ "Spec.Frodo.KEM.Decaps.get_bpp_cp_matrices_", 3, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.unsigned", "equation_Lib.Sequence.lseq", "equation_Lib.Sequence.to_seq", "equation_Prims.nat", "equation_Prims.pos", "equation_Prims.squash", "equation_Spec.AES.elem", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.bytes_mu", "equation_Spec.Frodo.Params.bytes_pkhash", "equation_Spec.Frodo.Params.bytes_seed_a", "equation_Spec.Frodo.Params.crypto_bytes", "equation_Spec.Frodo.Params.crypto_publickeybytes", "equation_Spec.Frodo.Params.crypto_secretkeybytes", "equation_Spec.Frodo.Params.params_extracted_bits", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.Frodo.Params.publicmatrixbytes_len", "equation_Spec.Frodo.Params.secretmatrixbytes_len", "equation_Spec.Frodo.Params.uu___0", "equation_Spec.GaloisField.felem", "equation_Spec.GaloisField.gf", "fuel_guarded_inversion_Spec.Frodo.Params.frodo_alg", "function_token_typing_Spec.Frodo.Params.uu___0", "int_inversion", "int_typing", "inversion-interp", "lemma_FStar.UInt.pow2_values", "primitive_Prims.op_Addition", "primitive_Prims.op_Division", "primitive_Prims.op_LessThanOrEqual", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxBool_proj_0", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_0ec011aea9f93256a3547ad9f0c667f1", "refinement_interpretation_Tm_refine_11f95177b5e5be87b1a98bf8beccc4bb", "refinement_interpretation_Tm_refine_1bf233953bbfd8c112c0c5f5ba86c688", "refinement_interpretation_Tm_refine_2a039e1a99d9d2644dcc4f59d4a41871", "refinement_interpretation_Tm_refine_2de20c066034c13bf76e9c0b94f4806c", "refinement_interpretation_Tm_refine_44540322a5aeeac77ad2eb12638c2b4f", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_5f12dc5b0bd9adc677c928d42ef6c764", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_c62e469265da3a3e9fd031e59569392a", "refinement_interpretation_Tm_refine_d8d83307254a8900dd20598654272e42", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "refinement_interpretation_Tm_refine_df12854a275b632c0f557e6eb16fa373", "refinement_interpretation_Tm_refine_f9571e70ba0b68745989f9c9fd7b1f70", "typing_Lib.IntTypes.bits", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.bytes_mu", "typing_Spec.Frodo.Params.bytes_pkhash", "typing_Spec.Frodo.Params.crypto_publickeybytes", "typing_Spec.Frodo.Params.crypto_secretkeybytes", "typing_Spec.Frodo.Params.params_extracted_bits", "typing_Spec.Frodo.Params.params_n", "typing_Spec.Frodo.Params.publicmatrixbytes_len", "typing_Spec.Frodo.Params.secretmatrixbytes_len", "typing_Spec.GaloisField.__proj__GF__item__t", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "9eb73c09c2fbfe5efeb1302c9966e9e1" ], [ "Spec.Frodo.KEM.Decaps.get_bpp_cp_matrices", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_Prims.nat", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.crypto_bytes", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.GaloisField.gf", "int_typing", "lemma_FStar.UInt.pow2_values", "lemma_Lib.IntTypes.v_mk_int", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_68ee6d2c8678eb431259a3d4f412550b", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Lib.IntTypes.bits", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.crypto_bytes", "typing_Spec.Frodo.Params.params_n", "typing_Spec.Frodo.Params.params_nbar", "typing_Spec.GaloisField.__proj__GF__item__t", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok", "typing_tok_Lib.IntTypes.U8@tok" ], 0, "d050d0dfba9706002675ee706cfc9179" ], [ "Spec.Frodo.KEM.Decaps.get_bpp_cp_matrices", 2, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_Prims.nat", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.crypto_bytes", "equation_Spec.GaloisField.gf", "int_typing", "lemma_FStar.UInt.pow2_values", "lemma_Lib.IntTypes.v_mk_int", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_68ee6d2c8678eb431259a3d4f412550b", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Lib.IntTypes.bits", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.crypto_bytes", "typing_Spec.GaloisField.__proj__GF__item__t", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "5b14c5f1025c0a37d95b9c5487b74ec0" ], [ "Spec.Frodo.KEM.Decaps.get_bpp_cp_matrices", 3, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.PUB", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U16", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.SEC@tok", "equality_tok_Lib.IntTypes.U16@tok", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.pub_int_v", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_Lib.Sequence.lseq", "equation_Lib.Sequence.seq", "equation_Lib.Sequence.to_seq", "equation_Prims.nat", "equation_Spec.AES.elem", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.bytes_seed_a", "equation_Spec.Frodo.Params.crypto_bytes", "equation_Spec.Frodo.Params.crypto_publickeybytes", "equation_Spec.Frodo.Params.crypto_secretkeybytes", "equation_Spec.Frodo.Params.params_extracted_bits", "equation_Spec.Frodo.Params.params_logq", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.GaloisField.felem", "equation_Spec.GaloisField.gf", "function_token_typing_Spec.AES.elem", "int_inversion", "int_typing", "lemma_FStar.UInt.pow2_values", "lemma_Lib.IntTypes.v_mk_int", "primitive_Prims.op_Addition", "primitive_Prims.op_Division", "primitive_Prims.op_LessThanOrEqual", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxBool_proj_0", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_0ec011aea9f93256a3547ad9f0c667f1", "refinement_interpretation_Tm_refine_18a3268040562df9fb7bd52c93439b78", "refinement_interpretation_Tm_refine_23c7fe41fcc61fe927f853ea1c7076bf", "refinement_interpretation_Tm_refine_2eabd77640eca4c5e03a67f4c7425390", "refinement_interpretation_Tm_refine_3ec92c5c3c6fc2e52c860c9063c9d55e", "refinement_interpretation_Tm_refine_4605054a44c32474018e3ce0b1340b20", "refinement_interpretation_Tm_refine_48486e77aa5457d9a27027fef170c244", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_68ee6d2c8678eb431259a3d4f412550b", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_d8d83307254a8900dd20598654272e42", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "refinement_interpretation_Tm_refine_df12854a275b632c0f557e6eb16fa373", "refinement_interpretation_Tm_refine_e77f3183f12fb153d77240db83b171ff", "typing_FStar.Seq.Base.length", "typing_Lib.IntTypes.bits", "typing_Lib.IntTypes.maxint", "typing_Lib.IntTypes.v", "typing_Spec.AES.gf8", "typing_Spec.AES.irred", "typing_Spec.Frodo.Params.crypto_bytes", "typing_Spec.Frodo.Params.crypto_publickeybytes", "typing_Spec.Frodo.Params.crypto_secretkeybytes", "typing_Spec.GaloisField.__proj__GF__item__t", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.SEC@tok", "typing_tok_Lib.IntTypes.U32@tok", "typing_tok_Lib.IntTypes.U8@tok" ], 0, "fe697437db57fc63fa9d0a98a8d2cc21" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec_kp_s_cond", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_Prims.nat", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.crypto_bytes", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.GaloisField.gf", "int_typing", "lemma_FStar.UInt.pow2_values", "lemma_Lib.IntTypes.v_mk_int", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_68ee6d2c8678eb431259a3d4f412550b", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Lib.IntTypes.bits", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.crypto_bytes", "typing_Spec.GaloisField.__proj__GF__item__t", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok", "typing_tok_Lib.IntTypes.U8@tok" ], 0, "df7eaa9df8250f41984b6dd00f88a593" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec_kp_s_cond", 2, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_Prims.nat", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.crypto_bytes", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.GaloisField.gf", "int_typing", "lemma_FStar.UInt.pow2_values", "lemma_Lib.IntTypes.v_mk_int", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_68ee6d2c8678eb431259a3d4f412550b", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Lib.IntTypes.bits", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.crypto_bytes", "typing_Spec.GaloisField.__proj__GF__item__t", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok", "typing_tok_Lib.IntTypes.U8@tok" ], 0, "9948f3a17ea74df4ecea65adb85c3611" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec_kp_s_cond", 3, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "Prims_pretyping_ae567c2fb75be05905677af440075565", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.SEC@tok", "equality_tok_Lib.IntTypes.U16@tok", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_Prims.nat", "equation_Prims.pos", "equation_Prims.squash", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.Frodo.Params.uu___0", "equation_Spec.GaloisField.gf", "fuel_guarded_inversion_Spec.Frodo.Params.frodo_alg", "function_token_typing_Prims.__cache_version_number__", "function_token_typing_Spec.Frodo.Params.uu___0", "inversion-interp", "lemma_FStar.UInt.pow2_values", "primitive_Prims.op_Equality", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxBool_proj_0", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_032bf6a48f5060ca879f2d84d403b4fa", "refinement_interpretation_Tm_refine_2a039e1a99d9d2644dcc4f59d4a41871", "refinement_interpretation_Tm_refine_2de20c066034c13bf76e9c0b94f4806c", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Lib.IntTypes.bits", "typing_Lib.IntTypes.ones", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.params_n", "typing_Spec.GaloisField.__proj__GF__item__t", "typing_tok_Lib.IntTypes.SEC@tok", "typing_tok_Lib.IntTypes.U16@tok", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "16cf152a2928609e8bd8299abef1c407" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec_kp_s", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_Prims.nat", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.crypto_bytes", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.GaloisField.gf", "int_typing", "lemma_FStar.UInt.pow2_values", "lemma_Lib.IntTypes.v_mk_int", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_68ee6d2c8678eb431259a3d4f412550b", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Lib.IntTypes.bits", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.crypto_bytes", "typing_Spec.GaloisField.__proj__GF__item__t", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok", "typing_tok_Lib.IntTypes.U8@tok" ], 0, "5f6052510421a58d981dfc8309025bb7" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec_kp_s", 2, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_Prims.nat", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.crypto_bytes", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.GaloisField.gf", "int_typing", "lemma_FStar.UInt.pow2_values", "lemma_Lib.IntTypes.v_mk_int", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_68ee6d2c8678eb431259a3d4f412550b", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Lib.IntTypes.bits", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.crypto_bytes", "typing_Spec.GaloisField.__proj__GF__item__t", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok", "typing_tok_Lib.IntTypes.U8@tok" ], 0, "79b4e1aa6b240f3952ed74f5821a02c9" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec_kp_s", 3, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_Lib.Sequence.lseq", "equation_Lib.Sequence.seq", "equation_Lib.Sequence.to_seq", "equation_Prims.nat", "equation_Spec.AES.elem", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.crypto_bytes", "equation_Spec.Frodo.Params.params_logq", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.GaloisField.felem", "equation_Spec.GaloisField.gf", "function_token_typing_Spec.AES.elem", "int_inversion", "int_typing", "lemma_FStar.UInt.pow2_values", "lemma_Lib.IntTypes.v_mk_int", "primitive_Prims.op_Addition", "primitive_Prims.op_Division", "primitive_Prims.op_LessThanOrEqual", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxBool_proj_0", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_0ec011aea9f93256a3547ad9f0c667f1", "refinement_interpretation_Tm_refine_23c7fe41fcc61fe927f853ea1c7076bf", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_68ee6d2c8678eb431259a3d4f412550b", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_d8d83307254a8900dd20598654272e42", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_FStar.Seq.Base.length", "typing_Lib.IntTypes.bits", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.crypto_bytes", "typing_Spec.Frodo.Params.crypto_ciphertextbytes", "typing_Spec.GaloisField.__proj__GF__item__t", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok", "typing_tok_Lib.IntTypes.U8@tok" ], 0, "b2e2aaae9c263f5d5f430ee8423aa474" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec_ss0", 1, 0, 0, [ "@MaxIFuel_assumption", "@query", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.GaloisField.gf", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Spec.AES.gf8", "typing_Spec.GaloisField.__proj__GF__item__t" ], 0, "8c3ef1b7bcb8bb3aff02e3a5cfebe342" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec_ss0", 2, 0, 0, [ "@MaxIFuel_assumption", "@query", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.GaloisField.gf", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Spec.AES.gf8", "typing_Spec.GaloisField.__proj__GF__item__t" ], 0, "8ad64b164cded7bb39b2e2ec3e5dd112" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec_ss0", 3, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U16", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U8", "disc_equation_Lib.IntTypes.S128", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.unsigned", "equation_Lib.Sequence.length", "equation_Prims.nat", "equation_Prims.pos", "equation_Prims.squash", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.crypto_bytes", "equation_Spec.Frodo.Params.crypto_ciphertextbytes", "equation_Spec.Frodo.Params.ct1bytes_len", "equation_Spec.Frodo.Params.ct2bytes_len", "equation_Spec.Frodo.Params.params_logq", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.Frodo.Params.uu___0", "equation_Spec.GaloisField.felem", "equation_Spec.GaloisField.gf", "fuel_guarded_inversion_Spec.Frodo.Params.frodo_alg", "function_token_typing_Spec.Frodo.Params.uu___0", "inversion-interp", "lemma_FStar.UInt.pow2_values", "primitive_Prims.op_Addition", "primitive_Prims.op_Division", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxBool_proj_0", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_2de20c066034c13bf76e9c0b94f4806c", "refinement_interpretation_Tm_refine_44540322a5aeeac77ad2eb12638c2b4f", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_c3756bd45df0f352e81c5b1f5eb810db", "refinement_interpretation_Tm_refine_d1b0601246bc2e9a31701d86ed99a91a", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Lib.IntTypes.bits", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.crypto_bytes", "typing_Spec.Frodo.Params.crypto_ciphertextbytes", "typing_Spec.Frodo.Params.ct1bytes_len", "typing_Spec.Frodo.Params.ct2bytes_len", "typing_Spec.GaloisField.__proj__GF__item__t", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "f8f679ed825299d07a9f49683b83543e" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec_seed_se_k", 1, 0, 0, [ "@MaxIFuel_assumption", "@query", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Prims.pos", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.bytes_pkhash", "equation_Spec.Frodo.Params.bytes_seed_a", "equation_Spec.Frodo.Params.crypto_publickeybytes", "equation_Spec.Frodo.Params.crypto_secretkeybytes", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.Frodo.Params.publicmatrixbytes_len", "equation_Spec.Frodo.Params.secretmatrixbytes_len", "equation_Spec.GaloisField.gf", "primitive_Prims.op_Addition", "primitive_Prims.op_Multiply", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_2a039e1a99d9d2644dcc4f59d4a41871", "refinement_interpretation_Tm_refine_44540322a5aeeac77ad2eb12638c2b4f", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.bytes_pkhash", "typing_Spec.Frodo.Params.crypto_secretkeybytes", "typing_Spec.Frodo.Params.params_n", "typing_Spec.Frodo.Params.publicmatrixbytes_len", "typing_Spec.GaloisField.__proj__GF__item__t" ], 0, "9367fa4779f8cc7e1c6a262426fd7176" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec_seed_se_k", 2, 0, 0, [ "@query" ], 0, "c5ade4bdc7c56252e157d4c5926fea82" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec_seed_se_k", 3, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.U32", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.unsigned", "equation_Lib.Sequence.length", "equation_Lib.Sequence.lseq", "equation_Lib.Sequence.to_seq", "equation_Prims.nat", "equation_Prims.pos", "equation_Prims.squash", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.bytes_mu", "equation_Spec.Frodo.Params.bytes_pkhash", "equation_Spec.Frodo.Params.bytes_seed_a", "equation_Spec.Frodo.Params.crypto_bytes", "equation_Spec.Frodo.Params.crypto_publickeybytes", "equation_Spec.Frodo.Params.params_extracted_bits", "equation_Spec.Frodo.Params.params_logq", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.Frodo.Params.publicmatrixbytes_len", "equation_Spec.Frodo.Params.secretmatrixbytes_len", "equation_Spec.Frodo.Params.uu___0", "equation_Spec.GaloisField.felem", "equation_Spec.GaloisField.gf", "fuel_guarded_inversion_Spec.Frodo.Params.frodo_alg", "function_token_typing_Spec.Frodo.Params.uu___0", "int_inversion", "inversion-interp", "lemma_FStar.UInt.pow2_values", "primitive_Prims.op_Addition", "primitive_Prims.op_Division", "primitive_Prims.op_LessThanOrEqual", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxBool_proj_0", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_2de20c066034c13bf76e9c0b94f4806c", "refinement_interpretation_Tm_refine_44540322a5aeeac77ad2eb12638c2b4f", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_ae077fcc8fbea990fc5eebcc8aef9651", "refinement_interpretation_Tm_refine_b4c65d9f900ee33499fab0d43c0ca511", "refinement_interpretation_Tm_refine_c3756bd45df0f352e81c5b1f5eb810db", "refinement_interpretation_Tm_refine_d8d83307254a8900dd20598654272e42", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Lib.IntTypes.bits", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.bytes_mu", "typing_Spec.Frodo.Params.crypto_bytes", "typing_Spec.Frodo.Params.crypto_publickeybytes", "typing_Spec.Frodo.Params.crypto_secretkeybytes", "typing_Spec.Frodo.Params.publicmatrixbytes_len", "typing_Spec.Frodo.Params.secretmatrixbytes_len", "typing_Spec.GaloisField.__proj__GF__item__t", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "cb0adbc6b786e4d87cc8f05b863a585e" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec_ss1", 1, 0, 0, [ "@MaxIFuel_assumption", "@query", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Prims.pos", "equation_Prims.squash", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.bytes_pkhash", "equation_Spec.Frodo.Params.bytes_seed_a", "equation_Spec.Frodo.Params.crypto_bytes", "equation_Spec.Frodo.Params.crypto_publickeybytes", "equation_Spec.Frodo.Params.crypto_secretkeybytes", "equation_Spec.Frodo.Params.ct1bytes_len", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.Frodo.Params.publicmatrixbytes_len", "equation_Spec.Frodo.Params.secretmatrixbytes_len", "equation_Spec.Frodo.Params.uu___0", "equation_Spec.GaloisField.gf", "fuel_guarded_inversion_Spec.Frodo.Params.frodo_alg", "function_token_typing_Spec.Frodo.Params.uu___0", "inversion-interp", "primitive_Prims.op_Addition", "primitive_Prims.op_Multiply", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_2a039e1a99d9d2644dcc4f59d4a41871", "refinement_interpretation_Tm_refine_2de20c066034c13bf76e9c0b94f4806c", "refinement_interpretation_Tm_refine_44540322a5aeeac77ad2eb12638c2b4f", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_c3756bd45df0f352e81c5b1f5eb810db", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.crypto_bytes", "typing_Spec.Frodo.Params.crypto_secretkeybytes", "typing_Spec.Frodo.Params.ct1bytes_len", "typing_Spec.Frodo.Params.params_n", "typing_Spec.Frodo.Params.secretmatrixbytes_len", "typing_Spec.GaloisField.__proj__GF__item__t" ], 0, "551fba7a0ab4a57d29c6ba56030260cd" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec_ss1", 2, 0, 0, [ "@MaxIFuel_assumption", "@query", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Prims.pos", "equation_Prims.squash", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.bytes_pkhash", "equation_Spec.Frodo.Params.bytes_seed_a", "equation_Spec.Frodo.Params.crypto_bytes", "equation_Spec.Frodo.Params.crypto_publickeybytes", "equation_Spec.Frodo.Params.crypto_secretkeybytes", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.Frodo.Params.publicmatrixbytes_len", "equation_Spec.Frodo.Params.secretmatrixbytes_len", "equation_Spec.Frodo.Params.uu___0", "equation_Spec.GaloisField.gf", "fuel_guarded_inversion_Spec.Frodo.Params.frodo_alg", "function_token_typing_Spec.Frodo.Params.uu___0", "inversion-interp", "primitive_Prims.op_Addition", "primitive_Prims.op_Multiply", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_2a039e1a99d9d2644dcc4f59d4a41871", "refinement_interpretation_Tm_refine_2de20c066034c13bf76e9c0b94f4806c", "refinement_interpretation_Tm_refine_44540322a5aeeac77ad2eb12638c2b4f", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.bytes_pkhash", "typing_Spec.Frodo.Params.crypto_secretkeybytes", "typing_Spec.Frodo.Params.params_n", "typing_Spec.Frodo.Params.publicmatrixbytes_len", "typing_Spec.Frodo.Params.secretmatrixbytes_len", "typing_Spec.GaloisField.__proj__GF__item__t" ], 0, "cbb03d74df30c0ef38c06cb4f7fa3297" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec_ss1", 3, 0, 0, [ "@MaxIFuel_assumption", "@query", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.Sequence.lseq", "equation_Lib.Sequence.to_seq", "equation_Prims.nat", "equation_Prims.pos", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.bytes_pkhash", "equation_Spec.Frodo.Params.bytes_seed_a", "equation_Spec.Frodo.Params.crypto_bytes", "equation_Spec.Frodo.Params.crypto_publickeybytes", "equation_Spec.Frodo.Params.crypto_secretkeybytes", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.Frodo.Params.publicmatrixbytes_len", "equation_Spec.Frodo.Params.secretmatrixbytes_len", "equation_Spec.GaloisField.felem", "equation_Spec.GaloisField.gf", "int_inversion", "primitive_Prims.op_Addition", "primitive_Prims.op_LessThanOrEqual", "primitive_Prims.op_Multiply", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxBool_proj_0", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_2a039e1a99d9d2644dcc4f59d4a41871", "refinement_interpretation_Tm_refine_44540322a5aeeac77ad2eb12638c2b4f", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_c3756bd45df0f352e81c5b1f5eb810db", "refinement_interpretation_Tm_refine_cd2310636f4c2c097fc6448cfadf0763", "refinement_interpretation_Tm_refine_d8d83307254a8900dd20598654272e42", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.crypto_bytes", "typing_Spec.Frodo.Params.crypto_publickeybytes", "typing_Spec.Frodo.Params.crypto_secretkeybytes", "typing_Spec.Frodo.Params.params_n", "typing_Spec.Frodo.Params.publicmatrixbytes_len", "typing_Spec.Frodo.Params.secretmatrixbytes_len", "typing_Spec.GaloisField.__proj__GF__item__t" ], 0, "05b315e65cd52da3f7621f25609bf1c8" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec_ss2", 1, 0, 0, [ "@MaxIFuel_assumption", "@query", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Prims.pos", "equation_Prims.squash", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.bytes_pkhash", "equation_Spec.Frodo.Params.bytes_seed_a", "equation_Spec.Frodo.Params.crypto_bytes", "equation_Spec.Frodo.Params.crypto_publickeybytes", "equation_Spec.Frodo.Params.crypto_secretkeybytes", "equation_Spec.Frodo.Params.ct1bytes_len", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.Frodo.Params.publicmatrixbytes_len", "equation_Spec.Frodo.Params.secretmatrixbytes_len", "equation_Spec.Frodo.Params.uu___0", "equation_Spec.GaloisField.gf", "fuel_guarded_inversion_Spec.Frodo.Params.frodo_alg", "function_token_typing_Spec.Frodo.Params.uu___0", "inversion-interp", "primitive_Prims.op_Addition", "primitive_Prims.op_Multiply", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_2a039e1a99d9d2644dcc4f59d4a41871", "refinement_interpretation_Tm_refine_2de20c066034c13bf76e9c0b94f4806c", "refinement_interpretation_Tm_refine_44540322a5aeeac77ad2eb12638c2b4f", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.bytes_pkhash", "typing_Spec.Frodo.Params.crypto_publickeybytes", "typing_Spec.Frodo.Params.crypto_secretkeybytes", "typing_Spec.Frodo.Params.ct1bytes_len", "typing_Spec.Frodo.Params.params_n", "typing_Spec.GaloisField.__proj__GF__item__t" ], 0, "57384350b6b5802a5d82519a02775b79" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec_ss2", 2, 0, 0, [ "@MaxIFuel_assumption", "@query", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Prims.pos", "equation_Prims.squash", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.bytes_pkhash", "equation_Spec.Frodo.Params.bytes_seed_a", "equation_Spec.Frodo.Params.crypto_bytes", "equation_Spec.Frodo.Params.crypto_publickeybytes", "equation_Spec.Frodo.Params.crypto_secretkeybytes", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.Frodo.Params.publicmatrixbytes_len", "equation_Spec.Frodo.Params.secretmatrixbytes_len", "equation_Spec.Frodo.Params.uu___0", "equation_Spec.GaloisField.gf", "fuel_guarded_inversion_Spec.Frodo.Params.frodo_alg", "function_token_typing_Spec.Frodo.Params.uu___0", "inversion-interp", "primitive_Prims.op_Addition", "primitive_Prims.op_Multiply", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_2a039e1a99d9d2644dcc4f59d4a41871", "refinement_interpretation_Tm_refine_2de20c066034c13bf76e9c0b94f4806c", "refinement_interpretation_Tm_refine_44540322a5aeeac77ad2eb12638c2b4f", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.bytes_pkhash", "typing_Spec.Frodo.Params.crypto_secretkeybytes", "typing_Spec.Frodo.Params.params_n", "typing_Spec.Frodo.Params.publicmatrixbytes_len", "typing_Spec.Frodo.Params.secretmatrixbytes_len", "typing_Spec.GaloisField.__proj__GF__item__t" ], 0, "bc6cdf6ae50518ac92dcb48d6fcd1ab2" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec_ss2", 3, 0, 0, [ "@MaxIFuel_assumption", "@query", "equation_Prims.pos", "equation_Spec.Frodo.Params.bytes_pkhash", "equation_Spec.Frodo.Params.bytes_seed_a", "equation_Spec.Frodo.Params.crypto_publickeybytes", "equation_Spec.Frodo.Params.crypto_secretkeybytes", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.Frodo.Params.publicmatrixbytes_len", "equation_Spec.Frodo.Params.secretmatrixbytes_len", "primitive_Prims.op_Addition", "primitive_Prims.op_Multiply", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_2a039e1a99d9d2644dcc4f59d4a41871", "refinement_interpretation_Tm_refine_44540322a5aeeac77ad2eb12638c2b4f", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "typing_Spec.Frodo.Params.bytes_pkhash", "typing_Spec.Frodo.Params.crypto_secretkeybytes", "typing_Spec.Frodo.Params.params_n", "typing_Spec.Frodo.Params.publicmatrixbytes_len" ], 0, "ce471232bbf98cb8b5a781162514aea7" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec_mu", 1, 0, 0, [ "@MaxIFuel_assumption", "@query", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Prims.pos", "equation_Prims.squash", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.bytes_pkhash", "equation_Spec.Frodo.Params.bytes_seed_a", "equation_Spec.Frodo.Params.crypto_bytes", "equation_Spec.Frodo.Params.crypto_publickeybytes", "equation_Spec.Frodo.Params.crypto_secretkeybytes", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.Frodo.Params.publicmatrixbytes_len", "equation_Spec.Frodo.Params.secretmatrixbytes_len", "equation_Spec.Frodo.Params.uu___0", "equation_Spec.GaloisField.gf", "fuel_guarded_inversion_Spec.Frodo.Params.frodo_alg", "function_token_typing_Spec.Frodo.Params.uu___0", "inversion-interp", "primitive_Prims.op_Addition", "primitive_Prims.op_Multiply", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_2a039e1a99d9d2644dcc4f59d4a41871", "refinement_interpretation_Tm_refine_2de20c066034c13bf76e9c0b94f4806c", "refinement_interpretation_Tm_refine_44540322a5aeeac77ad2eb12638c2b4f", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.bytes_pkhash", "typing_Spec.Frodo.Params.crypto_secretkeybytes", "typing_Spec.Frodo.Params.params_n", "typing_Spec.Frodo.Params.publicmatrixbytes_len", "typing_Spec.Frodo.Params.secretmatrixbytes_len", "typing_Spec.GaloisField.__proj__GF__item__t" ], 0, "c872ab6c97af2d5f99202bc232fe7e64" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec_mu", 2, 0, 0, [ "@MaxIFuel_assumption", "@query", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Prims.pos", "equation_Prims.squash", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.bytes_pkhash", "equation_Spec.Frodo.Params.bytes_seed_a", "equation_Spec.Frodo.Params.crypto_bytes", "equation_Spec.Frodo.Params.crypto_publickeybytes", "equation_Spec.Frodo.Params.crypto_secretkeybytes", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.Frodo.Params.publicmatrixbytes_len", "equation_Spec.Frodo.Params.secretmatrixbytes_len", "equation_Spec.Frodo.Params.uu___0", "equation_Spec.GaloisField.gf", "fuel_guarded_inversion_Spec.Frodo.Params.frodo_alg", "function_token_typing_Spec.Frodo.Params.uu___0", "inversion-interp", "primitive_Prims.op_Addition", "primitive_Prims.op_Multiply", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_2a039e1a99d9d2644dcc4f59d4a41871", "refinement_interpretation_Tm_refine_2de20c066034c13bf76e9c0b94f4806c", "refinement_interpretation_Tm_refine_44540322a5aeeac77ad2eb12638c2b4f", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.bytes_pkhash", "typing_Spec.Frodo.Params.crypto_publickeybytes", "typing_Spec.Frodo.Params.crypto_secretkeybytes", "typing_Spec.Frodo.Params.params_n", "typing_Spec.Frodo.Params.publicmatrixbytes_len", "typing_Spec.Frodo.Params.secretmatrixbytes_len", "typing_Spec.GaloisField.__proj__GF__item__t" ], 0, "fc58f83aa325a977e2791cf1c0340dfa" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec_mu", 3, 0, 0, [ "@MaxIFuel_assumption", "@query", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.Sequence.lseq", "equation_Lib.Sequence.to_seq", "equation_Prims.nat", "equation_Prims.pos", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.bytes_pkhash", "equation_Spec.Frodo.Params.bytes_seed_a", "equation_Spec.Frodo.Params.crypto_bytes", "equation_Spec.Frodo.Params.crypto_publickeybytes", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.Frodo.Params.publicmatrixbytes_len", "equation_Spec.Frodo.Params.secretmatrixbytes_len", "equation_Spec.GaloisField.felem", "equation_Spec.GaloisField.gf", "int_inversion", "primitive_Prims.op_Addition", "primitive_Prims.op_LessThanOrEqual", "primitive_Prims.op_Multiply", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxBool_proj_0", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_2a039e1a99d9d2644dcc4f59d4a41871", "refinement_interpretation_Tm_refine_44540322a5aeeac77ad2eb12638c2b4f", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_c3756bd45df0f352e81c5b1f5eb810db", "refinement_interpretation_Tm_refine_d8d83307254a8900dd20598654272e42", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "refinement_interpretation_Tm_refine_e857fb2c0d1a9611b95036d8c4b615a6", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.crypto_bytes", "typing_Spec.Frodo.Params.crypto_publickeybytes", "typing_Spec.Frodo.Params.crypto_secretkeybytes", "typing_Spec.Frodo.Params.params_n", "typing_Spec.Frodo.Params.publicmatrixbytes_len", "typing_Spec.GaloisField.__proj__GF__item__t" ], 0, "8ac05a8985b71e0ef60c427c21ecd14e" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec_", 1, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.S16", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.unsigned", "equation_Prims.nat", "equation_Prims.pos", "equation_Prims.squash", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.bytes_pkhash", "equation_Spec.Frodo.Params.bytes_seed_a", "equation_Spec.Frodo.Params.crypto_publickeybytes", "equation_Spec.Frodo.Params.crypto_secretkeybytes", "equation_Spec.Frodo.Params.ct1bytes_len", "equation_Spec.Frodo.Params.params_logq", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.Frodo.Params.publicmatrixbytes_len", "equation_Spec.Frodo.Params.secretmatrixbytes_len", "equation_Spec.Frodo.Params.uu___0", "equation_Spec.GaloisField.gf", "fuel_guarded_inversion_Spec.Frodo.Params.frodo_alg", "function_token_typing_Spec.Frodo.Params.uu___0", "inversion-interp", "lemma_FStar.UInt.pow2_values", "primitive_Prims.op_Addition", "primitive_Prims.op_Division", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_2a039e1a99d9d2644dcc4f59d4a41871", "refinement_interpretation_Tm_refine_2de20c066034c13bf76e9c0b94f4806c", "refinement_interpretation_Tm_refine_44540322a5aeeac77ad2eb12638c2b4f", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Lib.IntTypes.bits", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.bytes_pkhash", "typing_Spec.Frodo.Params.crypto_secretkeybytes", "typing_Spec.Frodo.Params.ct1bytes_len", "typing_Spec.Frodo.Params.params_n", "typing_Spec.Frodo.Params.publicmatrixbytes_len", "typing_Spec.Frodo.Params.secretmatrixbytes_len", "typing_Spec.GaloisField.__proj__GF__item__t", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "06ccb14ba0a81868677e56580cb34bd2" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec_", 2, 0, 0, [ "@MaxIFuel_assumption", "@query", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Prims.pos", "equation_Prims.squash", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.bytes_pkhash", "equation_Spec.Frodo.Params.bytes_seed_a", "equation_Spec.Frodo.Params.crypto_bytes", "equation_Spec.Frodo.Params.crypto_publickeybytes", "equation_Spec.Frodo.Params.crypto_secretkeybytes", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.Frodo.Params.publicmatrixbytes_len", "equation_Spec.Frodo.Params.secretmatrixbytes_len", "equation_Spec.Frodo.Params.uu___0", "equation_Spec.GaloisField.gf", "fuel_guarded_inversion_Spec.Frodo.Params.frodo_alg", "function_token_typing_Spec.Frodo.Params.uu___0", "inversion-interp", "primitive_Prims.op_Addition", "primitive_Prims.op_Multiply", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_2a039e1a99d9d2644dcc4f59d4a41871", "refinement_interpretation_Tm_refine_2de20c066034c13bf76e9c0b94f4806c", "refinement_interpretation_Tm_refine_44540322a5aeeac77ad2eb12638c2b4f", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.bytes_pkhash", "typing_Spec.Frodo.Params.crypto_secretkeybytes", "typing_Spec.Frodo.Params.params_n", "typing_Spec.Frodo.Params.publicmatrixbytes_len", "typing_Spec.Frodo.Params.secretmatrixbytes_len", "typing_Spec.GaloisField.__proj__GF__item__t" ], 0, "d937962f852db0a9de85049afb29c716" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec_", 3, 0, 0, [ "@MaxIFuel_assumption", "@query", "equation_Prims.pos", "equation_Spec.Frodo.Params.bytes_pkhash", "refinement_interpretation_Tm_refine_44540322a5aeeac77ad2eb12638c2b4f", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "typing_Spec.Frodo.Params.bytes_pkhash" ], 0, "cf9b8c36a7d795e3077f180a074c9013" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec", 1, 0, 0, [ "@MaxIFuel_assumption", "@query", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.GaloisField.gf", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "typing_Spec.AES.gf8", "typing_Spec.GaloisField.__proj__GF__item__t" ], 0, "2137cde2b5cbe82d323e4707e39b791b" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec", 2, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.S8", "constructor_distinct_Lib.IntTypes.U16", "constructor_distinct_Lib.IntTypes.U32", "constructor_distinct_Lib.IntTypes.U8", "equality_tok_Lib.IntTypes.PUB@tok", "equality_tok_Lib.IntTypes.U16@tok", "equality_tok_Lib.IntTypes.U1@tok", "equality_tok_Lib.IntTypes.U32@tok", "equality_tok_Lib.IntTypes.U8@tok", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.maxint", "equation_Lib.IntTypes.minint", "equation_Lib.IntTypes.range", "equation_Lib.IntTypes.unsigned", "equation_Lib.IntTypes.v", "equation_Lib.Sequence.length", "equation_Lib.Sequence.lseq", "equation_Lib.Sequence.to_seq", "equation_Prims.nat", "equation_Spec.AES.gf8", "equation_Spec.AES.irred", "equation_Spec.Frodo.Params.bytes_mu", "equation_Spec.Frodo.Params.bytes_seed_a", "equation_Spec.Frodo.Params.crypto_bytes", "equation_Spec.Frodo.Params.crypto_publickeybytes", "equation_Spec.Frodo.Params.params_extracted_bits", "equation_Spec.Frodo.Params.params_logq", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.GaloisField.felem", "equation_Spec.GaloisField.gf", "int_inversion", "int_typing", "lemma_FStar.UInt.pow2_values", "lemma_Lib.IntTypes.v_mk_int", "primitive_Prims.op_Addition", "primitive_Prims.op_Division", "primitive_Prims.op_LessThanOrEqual", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "proj_equation_Spec.GaloisField.GF_t", "projection_inverse_BoxBool_proj_0", "projection_inverse_BoxInt_proj_0", "projection_inverse_Spec.GaloisField.GF_t", "refinement_interpretation_Tm_refine_0ec011aea9f93256a3547ad9f0c667f1", "refinement_interpretation_Tm_refine_1792ab1028de78a371c01b68cf4b6dca", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_68ee6d2c8678eb431259a3d4f412550b", "refinement_interpretation_Tm_refine_83845a86f2550cdf941eeb1d9b59602b", "refinement_interpretation_Tm_refine_d8d83307254a8900dd20598654272e42", "refinement_interpretation_Tm_refine_de8080fdc4bd6678af723874a7d70466", "refinement_interpretation_Tm_refine_e77f3183f12fb153d77240db83b171ff", "refinement_interpretation_Tm_refine_e90c136cfd02594e1c0062f721b917c4", "typing_Lib.IntTypes.bits", "typing_Spec.AES.gf8", "typing_Spec.Frodo.Params.bytes_mu", "typing_Spec.Frodo.Params.crypto_bytes", "typing_Spec.Frodo.Params.crypto_publickeybytes", "typing_Spec.Frodo.Params.crypto_secretkeybytes", "typing_Spec.Frodo.Params.params_n", "typing_Spec.Frodo.Params.params_nbar", "typing_Spec.GaloisField.__proj__GF__item__t", "typing_tok_Lib.IntTypes.PUB@tok", "typing_tok_Lib.IntTypes.U32@tok", "typing_tok_Lib.IntTypes.U8@tok" ], 0, "09bb818f25aa71997dc05dcb6cb23127" ], [ "Spec.Frodo.KEM.Decaps.crypto_kem_dec", 3, 0, 0, [ "@MaxFuel_assumption", "@MaxIFuel_assumption", "@fuel_correspondence_Prims.pow2.fuel_instrumented", "@query", "constructor_distinct_Lib.IntTypes.U32", "equality_tok_Lib.IntTypes.U32@tok", "equation_Lib.IntTypes.bits", "equation_Lib.IntTypes.unsigned", "equation_Prims.nat", "equation_Prims.pos", "equation_Prims.squash", "equation_Spec.Frodo.Params.bytes_pkhash", "equation_Spec.Frodo.Params.bytes_seed_a", "equation_Spec.Frodo.Params.crypto_ciphertextbytes", "equation_Spec.Frodo.Params.crypto_publickeybytes", "equation_Spec.Frodo.Params.crypto_secretkeybytes", "equation_Spec.Frodo.Params.ct1bytes_len", "equation_Spec.Frodo.Params.ct2bytes_len", "equation_Spec.Frodo.Params.params_logq", "equation_Spec.Frodo.Params.params_n", "equation_Spec.Frodo.Params.params_nbar", "equation_Spec.Frodo.Params.publicmatrixbytes_len", "equation_Spec.Frodo.Params.secretmatrixbytes_len", "equation_Spec.Frodo.Params.uu___0", "fuel_guarded_inversion_Spec.Frodo.Params.frodo_alg", "function_token_typing_Spec.Frodo.Params.uu___0", "inversion-interp", "lemma_FStar.UInt.pow2_values", "primitive_Prims.op_Addition", "primitive_Prims.op_Division", "primitive_Prims.op_Multiply", "primitive_Prims.op_Subtraction", "projection_inverse_BoxInt_proj_0", "refinement_interpretation_Tm_refine_2a039e1a99d9d2644dcc4f59d4a41871", "refinement_interpretation_Tm_refine_2de20c066034c13bf76e9c0b94f4806c", "refinement_interpretation_Tm_refine_44540322a5aeeac77ad2eb12638c2b4f", "refinement_interpretation_Tm_refine_542f9d4f129664613f2483a6c88bc7c2", "refinement_interpretation_Tm_refine_774ba3f728d91ead8ef40be66c9802e5", "typing_Lib.IntTypes.bits", "typing_Spec.Frodo.Params.bytes_pkhash", "typing_Spec.Frodo.Params.crypto_ciphertextbytes", "typing_Spec.Frodo.Params.crypto_secretkeybytes", "typing_Spec.Frodo.Params.ct2bytes_len", "typing_Spec.Frodo.Params.params_n", "typing_Spec.Frodo.Params.publicmatrixbytes_len", "typing_Spec.Frodo.Params.secretmatrixbytes_len", "typing_tok_Lib.IntTypes.U32@tok" ], 0, "656885339b960cc4b5ad887278765f9e" ] ] ]