| true, ∀ by, bytes0. # bytes0 < # bytes → true → 0 < b2i(by) → bytes2int(by ' + bytes0) < 2 ^ ((n→i(# bytes0) + 1) * 8 - 1) ⊦ 0 < b2i(by) → bytes2int(by ' + bytes) < 2 ^ ((n→i(# bytes) + 1) * 8 - 1) |
2 ^ ((n→i(# bytes) + 1) * 8 - 1) ≤ bytes2int(by ' + bytes), 0 < b2i(by), ∀ by, bytes0. # bytes0 < # bytes → true → 0 < b2i(by) → bytes2int(by ' + bytes0) < 2 ^ ((n→i(# bytes0) + 1) * 8 - 1) ⊦
Used simplifier rules: ⊦ i < j ∧ 0 ≤ i → 0 < j; (forward)% ⊦ ¬ i < j ↔ j ≤ i;