| b2i(by) < 0, 2 ^ (8 * (2 + n→i(# bytes1))) ≤ 256 * bytes2int(i2b(0) ' + by ' + bytes1) + band(255, b2i(by0)), bytes2int(i2b(0) ' + by ' + bytes1) < 2 ^ ((n→i(# bytes1) + 1) * 8), ∀ by, bytes0. # bytes0 < #(bytes1 + by0 ') → 2 ^ ((n→i(# bytes0) + 1) * 8) ≤ bytes2int(i2b(0) ' + by ' + bytes0) ∧ b2i(by) < 0 → false ⊦ |
8 * (2 + n→i(# bytes1)) = 8 + 8 * (1 + n→i(# bytes1)), b2i(by) < 0, 2 ^ (8 * (2 + n→i(# bytes1))) ≤ 256 * bytes2int(i2b(0) ' + by ' + bytes1) + band(255, b2i(by0)), bytes2int(i2b(0) ' + by ' + bytes1) < 2 ^ ((n→i(# bytes1) + 1) * 8), ∀ by, bytes0. # bytes0 < #(bytes1 + by0 ') → 2 ^ ((n→i(# bytes0) + 1) * 8) ≤ bytes2int(i2b(0) ' + by ' + bytes0) ∧ b2i(by) < 0 → false ⊦
Used simplifier rules: ⊦ i + j = j + i;% ⊦ i * j + i = i * (j + 1);% ⊦ i * j * j0 = (i * j) * j0;% ⊦ i * j = j * i;% ⊦ i + j + i0 = (i + j) + i0;% ⊦ 0 < i → (i * j = i * j0 ↔ j = j0); Used formulas: 8 * (2 + n→i(# bytes1)) = 8 + 8 * (1 + n→i(# bytes1))