| int2bytes(bytes2int(i2b(0) ' + by ' + bytes1 + by0 ')) = i2b(0) ' + by ' + bytes1 + by0 ', 0 ≤ b2i(by), ∀ by, bytes0. # bytes0 < #(bytes1 + by0 ') → int2bytes(bytes2int(i2b(0) ' + by ' + bytes0)) = i2b(0) ' + by ' + bytes0 ∧ 0 ≤ b2i(by) → false ⊦ |
⊦ bytes ≠ [] → bytes2int(bytes + by ') = bytes2int(bytes) * 256 + band(b2i(by), 255)
i2b(0) ' + by ' + bytes1 ≠ [], int2bytes(bytes2int(i2b(0) ' + by ' + bytes1) * 256 + band(b2i(by0), 255)) = i2b(0) ' + by ' + bytes1 + by0 ', 0 ≤ b2i(by), ∀ by, bytes0. # bytes0 < #(bytes1 + by0 ') → int2bytes(bytes2int(i2b(0) ' + by ' + bytes0)) = i2b(0) ' + by ' + bytes0 ∧ 0 ≤ b2i(by) → false ⊦
Used simplifier rules: ⊦ ¬ bytes + bytes0 ≠ [] ↔ bytes = [] ∧ bytes0 = [];% ⊦ by ' ≠ [];% ⊦ (bytes + bytes0) + bytes1 = bytes + bytes0 + bytes1; Used terms: by0, i2b(0) ' + by ' + bytes1