| ¬ 255 < i, int2bytes(i) = i2b(0) ' + by ' + bytes, i2b(0) ∈ int2bytes(i), 0 ≤ b2i(by), ∀ bytes, by, i0. i→n(i0) < i→n(i) → int2bytes(i0) = i2b(0) ' + by ' + bytes ∧ 0 ≤ b2i(by) ∧ i2b(0) ∈ int2bytes(i0) → false ⊦ |
int2bytes(i) = i2b(0) ' + by ' + bytes, i2b(0) ∈ int2bytes(i), 0 ≤ b2i(by), i ≤ 255, ∀ bytes, by, i0. i→n(i0) < i→n(i) → int2bytes(i0) = i2b(0) ' + by ' + bytes ∧ 0 ≤ b2i(by) ∧ i2b(0) ∈ int2bytes(i0) → false ⊦
Used simplifier rules: ⊦ ¬ i < j ↔ j ≤ i;