| 0 ≤ b2i(by), 0 ≤ 2 ^ (8 * (2 + n→i(# bytes1)) - 1) + band(255, b2i(by0)) + 256 * bytes2int(i2b(~1) ' + by ' + bytes1), ∀ by, bytes0. # bytes0 < #(bytes1 + by0 ') → 0 ≤ b2i(by) ∧ 0 ≤ bytes2int(i2b(~1) ' + by ' + bytes0) + 2 ^ (8 * (n→i(# bytes0) + 1) - 1) → false ⊦ |
0 ≤ b2i(by), 0 ≤ 2 ^ (8 * (2 + n→i(# bytes1)) - 1) + band(255, b2i(by0)) + 256 * bytes2int(i2b(~1) ' + by ' + bytes1), ∀ by, bytes0. # bytes0 < #(bytes1 + by0 ') → 0 ≤ b2i(by) ∧ 0 ≤ bytes2int(i2b(~1) ' + by ' + bytes0) + 2 ^ (8 * (n→i(# bytes0) + 1) - 1) → false ⊦ 0 ≤ b2i(by) ∧ 0 ≤ bytes2int(i2b(~1) ' + by ' + bytes1) + 2 ^ (8 * (n→i(# bytes1) + 1) - 1)
Used simplifier rules: ⊦ #(bytes + bytes0) = # bytes + # bytes0;% ⊦ # by ' = 0 +1;% ⊦ (bytes + bytes0) + bytes1 = bytes + bytes0 + bytes1;% ⊦ m < n + 1 ↔ ¬ n < m;% ⊦ ¬ n < n;% ⊦ (m + n0) + n1 = m + n0 + n1;% ⊦ m + n = n + m; Used terms: by, bytes1