Definition WF (I:hmac256drbgabs):=
         Zlength (hmac256drbgabs_value I) = 32 /\ 
         0 < hmac256drbgabs_entropy_len I <= 384 /\
         RI_range (hmac256drbgabs_reseed_interval I)  /\
         0 <= hmac256drbgabs_reseed_counter I < Int.max_signed.

Lemma body_zeroize: semax_body HmacDrbgVarSpecs HmacDrbgFunSpecs f_mbedtls_zeroize mbedtls_zeroize_spec.