| ¬(1 < #(by ' + bytes0) ∧ b2i((by ' + bytes0).first) = 0 ∧ b2i((by ' + bytes0).rest.first) < 0), 1 + # bytes0 = # int2bytes(bytes2int(by ' + bytes0)), b2i(by) = 0 ⊦ int2bytes(bytes2int(by ' + bytes0)) = by ' + bytes0 |
1 + # bytes0 = # int2bytes(bytes2int(by ' + bytes0)), b2i(by) = 0, 0 ≤ b2i(bytes0.first) ⊦ int2bytes(bytes2int(by ' + bytes0)) = by ' + bytes0, bytes0 = []
Used simplifier rules: bytes2int-one: ⊦ bytes2int(by ') = b2i(by);%int2bytes-byte-01: ⊦ int2bytes(b2i(by)) = by ';% ⊦ i ≤ j ∧ 0 ≤ i → 0 ≤ j; (forward)% ⊦ by ' = by0 ' ↔ by = by0;% ⊦ bytes + [] = bytes;% ⊦ # [] = 0;% ⊦ ¬ i < j ↔ j ≤ i;% ⊦ (by ' + bytes).rest = bytes;% ⊦ (by ' + bytes).first = by;% ⊦ # bytes = 0 ↔ bytes = [];% ⊦ 1 = m + 1 ↔ m = 0;% ⊦ m + n = n + m;% ⊦ (m + n0) + n1 = m + n0 + n1;% ⊦ m + 1 ≠ 0;% ⊦ 1 < m ↔ ¬(m = 0 ∨ m = 1);% ⊦ (bytes + bytes0) + bytes1 = bytes + bytes0 + bytes1;% ⊦ # by ' = 0 +1;% ⊦ #(bytes + bytes0) = # bytes + # bytes0;