AES-256 from FIPS-197 in Lean 4: test vectors, decrypt∘encrypt = id, S-box uniformity 4 and nonlinearity 112, branch number 5, ≥25 active S-boxes in any 4 rounds. Kernel-checked, re-checked by Tenet.
cryptography aes theorem-proving aes-256 formal-verification tenet lean4 fips-197 leanviz lean-studio
-
Updated
Sep 28, 2026 - Lean