val buffer_update_strong (#t: Type0) (b: B.buffer t) (i: U32.t{U32.v i < B.length b}) (v: t)
    : HST.Stack unit
      (requires (fun h -> B.live h b))
      (ensures
        (fun h _ h' ->
            B.modifies (B.loc_buffer (B.gsub b i 1ul)) h h' /\
            (B.as_seq h' b) `Seq.equal` (Seq.upd (B.as_seq h b) (U32.v i) v)))
let buffer_update_strong
  (#t: Type0)
  (b: B.buffer t)
  (i: U32.t { U32.v i < B.length b })
  (v: t)
: HST.Stack unit
  (requires (fun h -> B.live h b))
  (ensures (fun h _ h' ->
    B.modifies (B.loc_buffer (B.gsub b i 1ul)) h h' /\
    B.as_seq h' b `Seq.equal` Seq.upd (B.as_seq h b) (U32.v i) v
  ))
= let b' = B.sub b i 1ul in
  let h = HST.get () in
  B.upd b' 0ul v;
  let h' = HST.get () in
  let f
    (j: nat { j < B.length b })
  : Lemma
    (Seq.index (B.as_seq h' b) j == Seq.index (Seq.upd (B.as_seq h b) (U32.v i) v) j)
  = let (b_, j_) =
      if j < U32.v i
      then B.gsub b 0ul i, j
      else if j = U32.v i
      then B.gsub b i 1ul, 0
      else B.gsub b (i `U32.add` 1ul) (B.len b `U32.sub` (i `U32.add` 1ul)), j - (U32.v i + 1)
    in
    assert (Seq.index (B.as_seq h b) j == Seq.index (B.as_seq h b_) j_);
    assert (Seq.index (B.as_seq h' b) j == Seq.index (B.as_seq h' b_) j_)
  in
  Classical.forall_intro f
val buffer_update_strong (#t: Type0) (b: B.buffer t) (i: U32.t{U32.v i < B.length b}) (v: t)
    : HST.Stack unit
      (requires (fun h -> B.live h b))
      (ensures
        (fun h _ h' ->
            B.modifies (B.loc_buffer (B.gsub b i 1ul)) h h' /\
            (B.as_seq h' b) `Seq.equal` (Seq.upd (B.as_seq h b) (U32.v i) v)))
let buffer_update_strong (#t: Type0) (b: B.buffer t) (i: U32.t{U32.v i < B.length b}) (v: t)
    : HST.Stack unit
      (requires (fun h -> B.live h b))
      (ensures
        (fun h _ h' ->
            B.modifies (B.loc_buffer (B.gsub b i 1ul)) h h' /\
            (B.as_seq h' b) `Seq.equal` (Seq.upd (B.as_seq h b) (U32.v i) v))) =
let b' = B.sub b i 1ul in
let h = HST.get () in
B.upd b' 0ul v;
let h' = HST.get () in
let f (j: nat{j < B.length b})
    : Lemma (Seq.index (B.as_seq h' b) j == Seq.index (Seq.upd (B.as_seq h b) (U32.v i) v) j) =
  let b_, j_ =
    if j < U32.v i
    then B.gsub b 0ul i, j
    else
      if j = U32.v i
      then B.gsub b i 1ul, 0
      else B.gsub b (i `U32.add` 1ul) ((B.len b) `U32.sub` (i `U32.add` 1ul)), j - (U32.v i + 1)
  in
  assert (Seq.index (B.as_seq h b) j == Seq.index (B.as_seq h b_) j_);
  assert (Seq.index (B.as_seq h' b) j == Seq.index (B.as_seq h' b_) j_)
in
Classical.forall_intro f
QUIC.Secret.Buffer.fsti.checked
QUIC.Secret.Seq.fsti.checked QUIC.Secret.Int.fsti.checked prims.fst.checked LowStar.Buffer.fst.checked FStar.UInt8.fsti.checked FStar.UInt32.fsti.checked FStar.Pervasives.Native.fst.checked FStar.Pervasives.fsti.checked FStar.HyperStack.ST.fsti.checked FStar.HyperStack.fst.checked FStar.Ghost.fsti.checked FStar.Endianness.fsti.checked FStar.Classical.fsti.checked
QUIC.Secret.Buffer.fsti
LowStar.Buffer.buffer FStar.UInt32.t Prims.b2t Prims.op_LessThan FStar.UInt32.v LowStar.Monotonic.Buffer.length LowStar.Buffer.trivial_preorder FStar.Classical.forall_intro Prims.nat Prims.eq2 FStar.Seq.Base.index LowStar.Monotonic.Buffer.as_seq FStar.Seq.Base.upd Prims.unit Prims.l_True Prims.squash Prims.Nil FStar.Pervasives.pattern LowStar.Monotonic.Buffer.mbuffer Prims._assert FStar.Pervasives.Native.tuple2 FStar.Pervasives.Native.Mktuple2 LowStar.Buffer.gsub FStar.UInt32.__uint_to_t Prims.bool Prims.op_Equality Prims.int Prims.l_or Prims.l_and Prims.op_GreaterThanOrEqual FStar.UInt.size FStar.UInt32.n FStar.UInt32.add FStar.UInt32.sub LowStar.Monotonic.Buffer.len Prims.op_Subtraction Prims.op_Addition FStar.Monotonic.HyperStack.mem FStar.HyperStack.ST.get LowStar.Monotonic.Buffer.upd LowStar.Buffer.sub FStar.Ghost.hide LowStar.Monotonic.Buffer.live LowStar.Monotonic.Buffer.modifies LowStar.Monotonic.Buffer.loc_buffer FStar.Seq.Base.equal
module QUIC.Secret.Buffer

module Secret = QUIC.Secret.Int
module B = LowStar.Buffer
module U8 = FStar.UInt8
module HS = FStar.HyperStack
module HST = FStar.HyperStack.ST
module Seq = QUIC.Secret.Seq
module Ghost = FStar.Ghost

module U32 = FStar.UInt32

#set-options "--z3rlimit 32"

let loc_buffer_from_to_if
  (#t: Type)
  (b: B.buffer t)
  (from to: U32.t)
: GTot B.loc
= if U32.v to < U32.v from || U32.v to > B.length b
  then B.loc_none
  else B.loc_buffer (B.gsub b from (to `U32.sub` from))

inline_for_extraction
noextract
val with_buffer_hide
  (#t: Type)
  (b: B.buffer U8.t)
  (from: U32.t)
  (to: U32.t { U32.v from <= U32.v to /\ U32.v to <= B.length b })
  (h0: HS.mem)
  (lin: Ghost.erased B.loc { B.loc_disjoint (Ghost.reveal lin) (B.loc_buffer b) })
  (lout: Ghost.erased B.loc { B.loc_disjoint (Ghost.reveal lout) (B.loc_buffer b) })
  (x1 x2 x3 x4 x5 x6: Ghost.erased U32.t)
  (post: (res: t) ->  (contl: Seq.lseq U8.t (U32.v from)) ->  (cont: Seq.lseq U8.t (U32.v to - U32.v from)) ->  (contr: Seq.lseq U8.t (B.length b - U32.v to)) -> (h: HS.mem) -> GTot Type0)
  (f: (
    (l: Ghost.erased B.loc) ->
    (bl: B.buffer U8.t { B.length bl == (U32.v from) }) ->
    (bs: B.buffer Secret.uint8 { B.length bs == (U32.v to - U32.v from) }) ->
    (br: B.buffer U8.t { B.length br == (B.length b - U32.v to) }) ->
    HST.Stack t
    (requires (fun h ->
      B.modifies l h0 h /\
      B.loc_disjoint (B.loc_buffer bl `B.loc_union` B.loc_buffer bs) (B.loc_buffer br) /\
      B.loc_disjoint (B.loc_buffer bl) (B.loc_buffer bs) /\
      B.loc_disjoint (Ghost.reveal lin `B.loc_union` Ghost.reveal lout) (Ghost.reveal l `B.loc_union` B.loc_buffer bl `B.loc_union` B.loc_buffer bs `B.loc_union` B.loc_buffer br) /\
      B.live h bl /\ B.live h bs /\ B.live h br /\
      B.as_seq h bl == B.as_seq h0 (B.gsub b 0ul from) /\
      B.as_seq h bs == Seq.seq_hide #Secret.U8 (B.as_seq h0 (B.gsub b from (to `U32.sub` from))) /\
      B.as_seq h br == B.as_seq h0 (B.gsub b to (B.len b `U32.sub` to))
    ))
    (ensures (fun h res h' ->
      B.modifies (Ghost.reveal lout `B.loc_union` loc_buffer_from_to_if bl x1 x2 `B.loc_union` loc_buffer_from_to_if bs x3 x4 `B.loc_union` loc_buffer_from_to_if br x5 x6) h h' /\
      post res (B.as_seq h' bl) (Seq.seq_reveal (B.as_seq h' bs)) (B.as_seq h' br) h'
    ))
  ))
: HST.Stack t
  (requires (fun h ->
    B.live h b /\
    h0 == h
  ))
  (ensures (fun h res h' ->
    B.modifies (Ghost.reveal lout `B.loc_union` loc_buffer_from_to_if (B.gsub b 0ul from) x1 x2 `B.loc_union` loc_buffer_from_to_if (B.gsub b from (to `U32.sub` from)) x3 x4 `B.loc_union` loc_buffer_from_to_if (B.gsub b to (B.len b `U32.sub` to)) x5 x6) h h' /\
    post res (B.as_seq h' (B.gsub b 0ul from)) (B.as_seq h' (B.gsub b from (to `U32.sub` from))) (B.as_seq h' (B.gsub b to (B.len b `U32.sub` to))) h'
  ))

inline_for_extraction
noextract
let with_buffer_hide_weak_modifies
  (#t: Type)
  (b: B.buffer U8.t)
  (from: U32.t)
  (to: U32.t { U32.v from <= U32.v to /\ U32.v to <= B.length b })
  (h0: HS.mem)
  (lin: Ghost.erased B.loc { B.loc_disjoint (Ghost.reveal lin) (B.loc_buffer b) })
  (lout: Ghost.erased B.loc { B.loc_disjoint (Ghost.reveal lout) (B.loc_buffer b) })
  (modifies_left modifies_secret modifies_right: Ghost.erased bool)
  (post: (res: t) ->  (contl: Seq.lseq U8.t (U32.v from)) ->  (cont: Seq.lseq U8.t (U32.v to - U32.v from)) ->  (contr: Seq.lseq U8.t (B.length b - U32.v to)) -> (h: HS.mem) -> GTot Type0)
  (f: (
    (l: Ghost.erased B.loc) ->
    (bl: B.buffer U8.t { B.length bl == (U32.v from) }) ->
    (bs: B.buffer Secret.uint8 { B.length bs == (U32.v to - U32.v from) }) ->
    (br: B.buffer U8.t { B.length br == (B.length b - U32.v to) }) ->
    HST.Stack t
    (requires (fun h ->
      B.modifies l h0 h /\
      B.loc_disjoint (B.loc_buffer bl `B.loc_union` B.loc_buffer bs) (B.loc_buffer br) /\
      B.loc_disjoint (B.loc_buffer bl) (B.loc_buffer bs) /\
      B.loc_disjoint (Ghost.reveal lin `B.loc_union` Ghost.reveal lout) (Ghost.reveal l `B.loc_union` B.loc_buffer bl `B.loc_union` B.loc_buffer bs `B.loc_union` B.loc_buffer br) /\
      B.live h bl /\ B.live h bs /\ B.live h br /\
      B.as_seq h bl == B.as_seq h0 (B.gsub b 0ul from) /\
      B.as_seq h bs == Seq.seq_hide #Secret.U8 (B.as_seq h0 (B.gsub b from (to `U32.sub` from))) /\
      B.as_seq h br == B.as_seq h0 (B.gsub b to (B.len b `U32.sub` to))
    ))
    (ensures (fun h res h' ->
      B.modifies (Ghost.reveal lout `B.loc_union` (if Ghost.reveal modifies_left then B.loc_buffer bl else B.loc_none) `B.loc_union` (if Ghost.reveal modifies_secret then B.loc_buffer bs else B.loc_none) `B.loc_union` (if Ghost.reveal modifies_right then B.loc_buffer br else B.loc_none)) h h' /\
      post res (B.as_seq h' bl) (Seq.seq_reveal (B.as_seq h' bs)) (B.as_seq h' br) h'
    ))
  ))
: HST.Stack t
  (requires (fun h ->
    B.live h b /\
    h0 == h
  ))
  (ensures (fun h res h' ->
    B.modifies (Ghost.reveal lout `B.loc_union` (if Ghost.reveal modifies_left then B.loc_buffer (B.gsub b 0ul from) else B.loc_none) `B.loc_union` (if Ghost.reveal modifies_secret then B.loc_buffer (B.gsub b from (to `U32.sub` from)) else B.loc_none) `B.loc_union` (if Ghost.reveal modifies_right then B.loc_buffer (B.gsub b to (B.len b `U32.sub` to)) else B.loc_none)) h h' /\
    post res (B.as_seq h' (B.gsub b 0ul from)) (B.as_seq h' (B.gsub b from (to `U32.sub` from))) (B.as_seq h' (B.gsub b to (B.len b `U32.sub` to))) h'
  ))
=
  with_buffer_hide
    b
    from
    to
    h0
    lin
    lout
    (if Ghost.reveal modifies_left then 0ul else 1ul) (if Ghost.reveal modifies_left then from else 0ul)
    (if Ghost.reveal modifies_secret then 0ul else 1ul) (if Ghost.reveal modifies_secret then (to `U32.sub` from) else 0ul)
    (if Ghost.reveal modifies_right then 0ul else 1ul) (if Ghost.reveal modifies_right then (B.len b `U32.sub` to) else 0ul)
    post
    (fun l bl bs br ->
      B.gsub_zero_length bl;
      B.gsub_zero_length bs;
      B.gsub_zero_length br;
      f l bl bs br
    )

(* NOTE: this CANNOT be derived from with_buffer_hide, because `to` should be the length, which is ghost *)

inline_for_extraction
noextract
val with_buffer_hide_from
  (#t: Type)
  (b: B.buffer U8.t)
  (from: U32.t { U32.v from <= B.length b })
  (h0: HS.mem)
  (lin: Ghost.erased B.loc { B.loc_disjoint (Ghost.reveal lin) (B.loc_buffer b) })
  (lout: Ghost.erased B.loc { B.loc_disjoint (Ghost.reveal lout) (B.loc_buffer b) })
  (x1 x2 x3 x4: Ghost.erased U32.t)
  (post: (res: t) ->  (contl: Seq.lseq U8.t (U32.v from)) ->  (cont: Seq.lseq U8.t (B.length b - U32.v from)) -> (h: HS.mem) -> GTot Type0)
  (f: (
    (l: Ghost.erased B.loc) ->
    (bl: B.buffer U8.t { B.length bl == (U32.v from) }) ->
    (bs: B.buffer Secret.uint8 { B.length bs == (B.length b - U32.v from) }) ->
    HST.Stack t
    (requires (fun h ->
      B.modifies l h0 h /\
      B.loc_disjoint (B.loc_buffer bl) (B.loc_buffer bs) /\
      B.loc_disjoint (Ghost.reveal lin `B.loc_union` Ghost.reveal lout) (Ghost.reveal l `B.loc_union` B.loc_buffer bl `B.loc_union` B.loc_buffer bs) /\
      B.live h bl /\ B.live h bs /\
      B.as_seq h bl == B.as_seq h0 (B.gsub b 0ul from) /\
      B.as_seq h bs == Seq.seq_hide #Secret.U8 (B.as_seq h0 (B.gsub b from (B.len b `U32.sub` from)))
    ))
    (ensures (fun h res h' ->
      B.modifies (Ghost.reveal lout `B.loc_union` loc_buffer_from_to_if bl x1 x2 `B.loc_union` loc_buffer_from_to_if bs x3 x4) h h' /\
      post res (B.as_seq h' bl) (Seq.seq_reveal (B.as_seq h' bs)) h'
    ))
  ))
: HST.Stack t
  (requires (fun h ->
    B.live h b /\
    h0 == h
  ))
  (ensures (fun h res h' ->
    B.modifies (Ghost.reveal lout `B.loc_union` loc_buffer_from_to_if (B.gsub b 0ul from) x1 x2 `B.loc_union` loc_buffer_from_to_if (B.gsub b from (B.len b `U32.sub` from)) x3 x4) h h' /\
    post res (B.as_seq h' (B.gsub b 0ul from)) (B.as_seq h' (B.gsub b from (B.len b `U32.sub` from))) h'
  ))

inline_for_extraction
noextract
let with_buffer_hide_from_weak_modifies
  (#t: Type)
  (b: B.buffer U8.t)
  (from: U32.t { U32.v from <= B.length b })
  (h0: HS.mem)
  (lin: Ghost.erased B.loc { B.loc_disjoint (Ghost.reveal lin) (B.loc_buffer b) })
  (lout: Ghost.erased B.loc { B.loc_disjoint (Ghost.reveal lout) (B.loc_buffer b) })
  (modifies_left modifies_secret: Ghost.erased bool)
  (post: (res: t) ->  (contl: Seq.lseq U8.t (U32.v from)) ->  (cont: Seq.lseq U8.t (B.length b - U32.v from)) -> (h: HS.mem) -> GTot Type0)
  (f: (
    (l: Ghost.erased B.loc) ->
    (bl: B.buffer U8.t { B.length bl == (U32.v from) }) ->
    (bs: B.buffer Secret.uint8 { B.length bs == (B.length b - U32.v from) }) ->
    HST.Stack t
    (requires (fun h ->
      B.modifies l h0 h /\
      B.loc_disjoint (B.loc_buffer bl) (B.loc_buffer bs) /\
      B.loc_disjoint (Ghost.reveal lin `B.loc_union` Ghost.reveal lout) (Ghost.reveal l `B.loc_union` B.loc_buffer bl `B.loc_union` B.loc_buffer bs) /\
      B.live h bl /\ B.live h bs /\
      B.as_seq h bl == B.as_seq h0 (B.gsub b 0ul from) /\
      B.as_seq h bs == Seq.seq_hide #Secret.U8 (B.as_seq h0 (B.gsub b from (B.len b `U32.sub` from)))
    ))
    (ensures (fun h res h' ->
      B.modifies (Ghost.reveal lout `B.loc_union` (if Ghost.reveal modifies_left then B.loc_buffer bl else B.loc_none) `B.loc_union` (if Ghost.reveal modifies_secret then B.loc_buffer bs else B.loc_none)) h h' /\
      post res (B.as_seq h' bl) (Seq.seq_reveal (B.as_seq h' bs)) h'
    ))
  ))
: HST.Stack t
  (requires (fun h ->
    B.live h b /\
    h0 == h
  ))
  (ensures (fun h res h' ->
    B.modifies (Ghost.reveal lout `B.loc_union` (if Ghost.reveal modifies_left then B.loc_buffer (B.gsub b 0ul from) else B.loc_none) `B.loc_union` (if Ghost.reveal modifies_secret then B.loc_buffer (B.gsub b from (B.len b `U32.sub` from)) else B.loc_none)) h h' /\
    post res (B.as_seq h' (B.gsub b 0ul from)) (B.as_seq h' (B.gsub b from (B.len b `U32.sub` from))) h'
  ))
=
  with_buffer_hide_from
    b
    from
    h0
    lin
    lout
    (if Ghost.reveal modifies_left then 0ul else 1ul) (if Ghost.reveal modifies_left then from else 0ul)
    (if Ghost.reveal modifies_secret then 0ul else 1ul) (if Ghost.reveal modifies_secret then B.len b `U32.sub` from else 0ul)
    post
    (fun l bl bs ->
      B.gsub_zero_length bl;
      B.gsub_zero_length bs;
      f l bl bs
    )

inline_for_extraction
noextract
let with_whole_buffer_hide_weak_modifies
  (#t: Type)
  (b: B.buffer U8.t)
  (h0: HS.mem)
  (lin: Ghost.erased B.loc { B.loc_disjoint (Ghost.reveal lin) (B.loc_buffer b) })
  (lout: Ghost.erased B.loc { B.loc_disjoint (Ghost.reveal lout) (B.loc_buffer b) })
  (modifies_b: Ghost.erased bool)
  (post: (res: t) -> (cont: Seq.lseq U8.t (B.length b)) -> (h: HS.mem) -> GTot Type0)
  (f: (
    (l: Ghost.erased B.loc) ->
    (bs: B.buffer Secret.uint8 { B.length bs == B.length b }) ->
    HST.Stack t
    (requires (fun h ->
      B.modifies l h0 h /\
      B.loc_disjoint (Ghost.reveal lin `B.loc_union` Ghost.reveal lout) (Ghost.reveal l `B.loc_union` B.loc_buffer bs) /\
      B.live h bs /\
      B.as_seq h bs == Seq.seq_hide #Secret.U8 (B.as_seq h0 b)
    ))
    (ensures (fun h res h' ->
      B.modifies (Ghost.reveal lout `B.loc_union` (if Ghost.reveal modifies_b then B.loc_buffer bs else B.loc_none)) h h' /\
      post res (Seq.seq_reveal (B.as_seq h' bs)) h'
    ))
  ))
: HST.Stack t
  (requires (fun h ->
    B.live h b /\
    h0 == h
  ))
  (ensures (fun h res h' ->
    B.modifies (Ghost.reveal lout `B.loc_union` (if Ghost.reveal modifies_b then B.loc_buffer b else B.loc_none)) h h' /\
    post res (B.as_seq h' b) h'
  ))
= let sq : squash (B.gsub b 0ul (B.len b) == b) =
    B.gsub_zero_length b
  in
  let h0 = HST.get () in
  with_buffer_hide_from_weak_modifies
    b
    0ul
    h0
    lin
    lout
    (Ghost.hide false) modifies_b
    (fun res _ cont h -> post res cont h)
    (fun l bl bs ->
      f l bs
    )

inline_for_extraction
noextract
let with_whole_buffer_hide_weak_modifies'
  (#t: Type)
  (b: B.buffer U8.t)
  (h0: HS.mem)
  (lin: Ghost.erased B.loc { B.loc_disjoint (Ghost.reveal lin) (B.loc_buffer b) })
  (lout: Ghost.erased B.loc { B.loc_disjoint (Ghost.reveal lout) (B.loc_buffer b) })
  (modifies_b: Ghost.erased bool)
  (post: (res: t) -> (cont: Seq.lseq Secret.uint8 (B.length b)) -> (h: HS.mem) -> GTot Type0)
  (f: (
    (l: Ghost.erased B.loc) ->
    (bs: B.buffer Secret.uint8 { B.length bs == B.length b }) ->
    HST.Stack t
    (requires (fun h ->
      B.modifies l h0 h /\
      B.loc_disjoint (Ghost.reveal lin `B.loc_union` Ghost.reveal lout) (Ghost.reveal l `B.loc_union` B.loc_buffer bs) /\
      B.live h bs /\
      B.as_seq h bs == Seq.seq_hide #Secret.U8 (B.as_seq h0 b)
    ))
    (ensures (fun h res h' ->
      B.modifies (Ghost.reveal lout `B.loc_union` (if Ghost.reveal modifies_b then B.loc_buffer bs else B.loc_none)) h h' /\
      post res (B.as_seq h' bs) h'
    ))
  ))
: HST.Stack t
  (requires (fun h ->
    B.live h b /\
    h0 == h
  ))
  (ensures (fun h res h' ->
    B.modifies (Ghost.reveal lout `B.loc_union` (if Ghost.reveal modifies_b then B.loc_buffer b else B.loc_none)) h h' /\
    post res (Seq.seq_hide (B.as_seq h' b)) h'
  ))
= let h0 = HST.get () in
  with_whole_buffer_hide_weak_modifies
    b
    h0
    lin
    lout
    modifies_b
    (fun res cont h -> post res (Seq.seq_hide #Secret.U8 cont) h)
    (fun l bs ->
      f l bs
    )

module E = FStar.Endianness

inline_for_extraction noextract
val load64_be
  (b:B.buffer Secret.uint8{B.length b == 8}):
  HST.Stack Secret.uint64
    (requires (fun h -> B.live h b))
    (ensures  (fun h0 z h1 -> h0 == h1 /\ B.live h1 b /\
                           E.be_to_n (Seq.seq_reveal (B.as_seq h1 b)) == Secret.v z))

inline_for_extraction noextract
val load32_be
  (b:B.buffer Secret.uint8{B.length b == 4}):
  HST.Stack Secret.uint32
    (requires (fun h -> B.live h b))
    (ensures  (fun h0 z h1 -> h0 == h1 /\ B.live h1 b /\
                           E.be_to_n (Seq.seq_reveal (B.as_seq h1 b)) == Secret.v z))

inline_for_extraction noextract
val load32_le
  (b:B.buffer Secret.uint8 {B.length b == 4}):
  HST.Stack Secret.uint32
    (requires (fun h -> B.live h b))
    (ensures  (fun h0 z h1 -> h0 == h1 /\ B.live h1 b /\
                           E.le_to_n (Seq.seq_reveal (B.as_seq h1 b)) == Secret.v z))

inline_for_extraction noextract
val store64_be
  (b:B.buffer Secret.uint8 {B.length b == 8})
  (z:Secret.uint64)
: HST.Stack unit
    (requires (fun h -> B.live h b))
    (ensures  (fun h0 _ h1 -> B.(modifies (loc_buffer b) h0 h1) /\ B.live h1 b /\
                           E.be_to_n (Seq.seq_reveal (B.as_seq h1 b)) == Secret.v z))

inline_for_extraction noextract
val store32_be
  (b:B.buffer Secret.uint8 {B.length b == 4})
  (z:Secret.uint32)
: HST.Stack unit
    (requires (fun h -> B.live h b))
    (ensures  (fun h0 _ h1 -> B.(modifies (loc_buffer b) h0 h1) /\ B.live h1 b /\
                           E.be_to_n (Seq.seq_reveal (B.as_seq h1 b)) == Secret.v z))

inline_for_extraction noextract
val store32_le
  (b:B.buffer Secret.uint8 {B.length b == 4})
  (z:Secret.uint32)
: HST.Stack unit
    (requires (fun h -> B.live h b))
    (ensures  (fun h0 _ h1 -> B.(modifies (loc_buffer b) h0 h1) /\ B.live h1 b /\
                           E.le_to_n (Seq.seq_reveal (B.as_seq h1 b)) == Secret.v z))

(* Not secret-related, but very useful for footprints *)

inline_for_extraction
let buffer_update_strong
  (#t: Type0)
  (b: B.buffer t)
  (i: U32.t { U32.v i < B.length b })
  (v: t)
: HST.Stack unit
  (requires (fun h -> B.live h b))
  (ensures (fun h _ h' ->
    B.modifies (B.loc_buffer (B.gsub b i 1ul)) h h' /\
    B.as_seq h' b `Seq.equal` Seq.upd (B.as_seq h b) (U32.v i) v
val buffer_update_strong (#t: Type0) (b: B.buffer t) (i: U32.t{U32.v i < B.length b}) (v: t)
    : HST.Stack unit
      (requires (fun h -> B.live h b))
      (ensures
        (fun h _ h' ->
            B.modifies (B.loc_buffer (B.gsub b i 1ul)) h h' /\
            (B.as_seq h' b) `Seq.equal` (Seq.upd (B.as_seq h b) (U32.v i) v)))

    b: LowStar.Buffer.buffer t ->
    i: FStar.UInt32.t{FStar.UInt32.v i < LowStar.Monotonic.Buffer.length b} ->
    v: t
  -> FStar.HyperStack.ST.Stack Prims.unit