https://github.com/EasyCrypt/easycrypt
Revision 3f4a0bd5596888cd8d28b97687d477942187aa5f authored by Pierre-Yves Strub on 11 June 2022, 06:10:21 UTC, committed by Adrien Koutsos on 13 June 2022, 09:22:31 UTC
Loops' epilogs must now be deterministic and loop/calls-free.
This forbids the following unsoundness:
```
require import AllCore DBool.
module E = {
var i,j : int
proc foo () = {
var c;
i <- 0;
j <- 0;
c <- false;
while (!c) {
i <- i + 1;
j <- j + 1;
c <$ {0,1};
}
return i = j;
}
proc bar () = {
var c;
i <- 0;
j <- 0;
c <- false;
while (!c) {
i <- i + 1;
c <$ {0,1};
}
c <- false;
while (!c) {
j <- j + 1;
c <$ {0,1};
}
return i = j;
}
}.
equiv bad : E.foo ~ E.bar : true ==> ={res}.
proof.
proc.
fission{1} 4!1 @1,2. by sim.
qed.
```
Fix #210
1 parent b9af81d
Tip revision: 3f4a0bd5596888cd8d28b97687d477942187aa5f authored by Pierre-Yves Strub on 11 June 2022, 06:10:21 UTC
In loop fusion/fission, add more constraints on the epilog
In loop fusion/fission, add more constraints on the epilog
Tip revision: 3f4a0bd
AUTHORS
The following people have contributed code and/or ideas to EasyCrypt:
Adrien Koutsos
Alley Stoughton
Antoine Séré
Asif Mallik
Benedikt Schmidt
Benjamin Gregoire
César Kunz
Christian Doczkal
Cécile Baritel-Ruet
Daniel Hedin
Davide Ramaglietta
Davy Guillaume
François Dupressoir
Gilles Barthe
Guillermo Ramos
José Bacelar Almeida
Juan Manuel Crespo
Kai-Chun Ning
Lavinia Damian
Manuel Barbosa
Martin Ceresa
Matthias Meijers
Mayram
Morten Solberg
Oskar Goldhahn
Pierre-Yves Strub
Roberto Metere
Santiago Zanella-Béguelin
Vincent Laporte
Computing file changes ...
