src/HOL/SPARK/Examples/RIPEMD-160/R_L.thy
author haftmann
Fri, 02 Mar 2012 21:45:45 +0100
changeset 46767 807a5d219c23
parent 41561 d1318f3c86ba
child 56798 939e88e79724
permissions -rw-r--r--
more fundamental pred-to-set conversions for range and domain by means of inductive_set

(*  Title:      HOL/SPARK/Examples/RIPEMD-160/R_L.thy
    Author:     Fabian Immler, TU Muenchen

Verification of the RIPEMD-160 hash function
*)

theory R_L
imports RMD_Specification RMD_Lemmas
begin

spark_open "rmd/r_l.siv"

spark_vc function_r_l_2
proof -
  from `0 \<le> j` `j \<le> 79`
  show C: ?C1
    by (simp add: r_def r_list_def nth_map [symmetric, of _ _ int] del: fun_upd_apply)
      (simp add: nth_fun_of_list_eq [of _ _ undefined] del: fun_upd_apply)
  from C show ?C2 by simp
  have "list_all (\<lambda>n. int n \<le> 15) r_list"
    by (simp add: r_list_def)
  moreover have "length r_list = 80"
    by (simp add: r_list_def)
  ultimately show ?C3 unfolding C using `j \<le> 79`
    by (simp add: r_def list_all_length)
qed

spark_end

end