| b2i(by0) = ~1, 0 ≤ b2i(by), ∀ bytes1. # bytes1 < #((by0 + []) + by ') → b2i(bytes1.first) = ~1 ∧ 0 ≤ b2i(bytes1.rest.first) → bits2bytes(sgn(bytes2bits(bytes1))) = bytes1 ∨ # bytes1 = 1 ∨ bytes1 = [] ⊦ false ∈ fillsgn(8, int2bits(b2i(by0))), bits2bytes(sgn(fillsgn(8, int2bits(b2i(by0))) + byte2bits(by))) = by0 ' + by ' |
b2i(by0) = ~1, 0 ≤ b2i(by), ∀ bytes1. # bytes1 < #((by0 + []) + by ') → b2i(bytes1.first) = ~1 ∧ 0 ≤ b2i(bytes1.rest.first) → bits2bytes(sgn(bytes2bits(bytes1))) = bytes1 ∨ # bytes1 = 1 ∨ bytes1 = [] ⊦ bits2bytes(sgn(true ' + byte2bits(by))) = by0 ' + by '
Used simplifier rules: ⊦ boolvar ∈ boolvar0 ' ↔ boolvar ↔ boolvar0;%⊦ ¬ boolvar ∈ boolvar0 ' + bits ↔ ¬(boolvar ↔ boolvar0) ∧ ¬ boolvar ∈ bits;% ⊦ sgn(boolvar ' + boolvar ' + bits) = sgn(boolvar ' + bits);% ⊦ bits + [] = bits;% ⊦ mklist(boolvar, 0) = [];%n ≠ 0 ⊦ mklist(true, (* n)) = true ' + mklist(true, n -1);% ⊦ 0 < n → fillsgn(n, boolvar ') = mklist(boolvar, n);% ⊦ sgn(true ' + true ') = true ';% ⊦ bits + boolvar = bits + boolvar ';% ⊦ (bits + false ')+1 = bits + true;% ⊦ (bits + bits0) + bits1 = bits + bits0 + bits1;% ⊦ boolvar + bits = boolvar ' + bits;% ⊦ bitsinvert(true ') = false ';% ⊦ bitsinvert(false ' + bits) = true + bitsinvert(bits);% ⊦ boolvar + boolvar0 = boolvar ' + boolvar0 ';% ⊦ uint2bits(1) = false + true;%i < 0 ⊦ int2bits((* i)) = sgn(bitsinvert(uint2bits(abs(i))) +1);