• Top
    • Documentation
    • Books
    • Boolean-reasoning
    • Projects
      • Apt
      • Zfc
      • Acre
      • Milawa
      • Smtlink
      • Abnf
      • Vwsim
      • Isar
      • Wp-gen
      • Dimacs-reader
      • Pfcs
      • Legacy-defrstobj
      • Proof-checker-array
      • Soft
      • C
      • Farray
      • Rp-rewriter
      • Instant-runoff-voting
      • Imp-language
      • Sidekick
      • Leftist-trees
      • Java
      • Taspi
      • Bitcoin
      • Riscv
      • Des
      • Ethereum
      • X86isa
      • Sha-2
      • Yul
      • Zcash
      • Proof-checker-itp13
      • Regex
      • ACL2-programming-language
      • Json
      • Jfkr
      • Equational
      • Cryptography
      • Poseidon
        • Poseidon-main-definition
          • Param
          • Hashp
          • Absorb1
          • Sponge
          • Hash
          • All-rounds
          • Sponge-validp
          • Squeeze1
          • Sub-words-partial
          • Squeeze
            • Round
            • Partial-rounds
            • Mode
            • Full-rounds
            • Permute
            • Sub-words
            • Add-round-constants
            • Mix-layer
            • Dot-product
            • Absorb
            • Pow-by-alpha
            • Param->size
            • Sub-words-full
            • Param->capacity-then-rate-p
            • Param->partial-last-p
            • Param-additional-theorems
            • Param->rounds
            • Param->descending-p
            • Init-sponge
          • Poseidon-instantiations
        • Where-do-i-place-my-book
        • Axe
        • Bigmems
        • Builtins
        • Execloader
        • Aleo
        • Solidity
        • Paco
        • Concurrent-programs
        • Bls12-377-curves
      • Debugging
      • Std
      • Proof-automation
      • Macro-libraries
      • ACL2
      • Interfacing-tools
      • Hardware-verification
      • Software-verification
      • Math
      • Testing-utilities
    • Poseidon-main-definition

    Squeeze

    Squeeze any number of elements from the sponge.

    Signature
    (squeeze count sponge param) → (mv outputs new-sponge)
    Arguments
    count — Guard (natp count).
    sponge — Guard (spongep sponge).
    param — Guard (paramp param).
    Returns
    outputs — Type (fe-listp outputs (param->prime param)), given (sponge-validp sponge param).
    new-sponge — Type (spongep new-sponge).

    We use squeeze1 for each output, whose count is passed to this ACL2 function, threading the sponge state through the sequence.

    Definitions and Theorems

    Function: squeeze

    (defun squeeze (count sponge param)
      (declare (xargs :guard (and (natp count)
                                  (spongep sponge)
                                  (paramp param))))
      (declare (xargs :guard (sponge-validp sponge param)))
      (let ((__function__ 'squeeze))
        (declare (ignorable __function__))
        (b* (((when (zp count))
              (mv nil (sponge-fix sponge)))
             ((mv output sponge)
              (squeeze1 sponge param))
             ((mv outputs sponge)
              (squeeze (1- count) sponge param)))
          (mv (cons output outputs) sponge))))

    Theorem: fe-listp-of-squeeze.outputs

    (defthm fe-listp-of-squeeze.outputs
      (implies (sponge-validp sponge param)
               (b* (((mv ?outputs ?new-sponge)
                     (squeeze count sponge param)))
                 (fe-listp outputs (param->prime param))))
      :rule-classes :rewrite)

    Theorem: spongep-of-squeeze.new-sponge

    (defthm spongep-of-squeeze.new-sponge
      (b* (((mv ?outputs ?new-sponge)
            (squeeze count sponge param)))
        (spongep new-sponge))
      :rule-classes :rewrite)

    Theorem: sponge-validp-of-squeeze

    (defthm sponge-validp-of-squeeze
      (implies (sponge-validp sponge param)
               (b* (((mv ?outputs ?new-sponge)
                     (squeeze count sponge param)))
                 (sponge-validp new-sponge param)))
      :rule-classes :rewrite)

    Theorem: len-of-squeeze.outputs

    (defthm len-of-squeeze.outputs
      (b* (((mv ?outputs ?new-sponge)
            (squeeze count sponge param)))
        (equal (len outputs) (nfix count))))