| ¬ 0 ≤ b2i(by0), b2i(by) = 0, int2bytes(band(b2i(by0), 255)) = i2b(0) ' + by ' + bytes1 + by0 ', by0 ∈ int2bytes(band(b2i(by0), 255)), i2b(0) ∈ int2bytes(band(b2i(by0), 255)), 0 ≤ band(b2i(by0), 255), band(b2i(by0), 255) < 256, ∀ by, bytes0. # bytes0 < #(bytes1 + by0 ') → int2bytes(bytes2int(i2b(0) ' + by ' + bytes0)) = i2b(0) ' + by ' + bytes0 ∧ 0 ≤ b2i(by) → false ⊦ true ∈ bytes2bits(bytes1), true ∈ byte2bits(i2b(0)) |
b2i(by) = 0, int2bytes(256 + b2i(by0)) = i2b(0) ' + by ' + bytes1 + by0 ', ~256 ≤ b2i(by0), b2i(by0) < 0, i2b(0) ∈ int2bytes(256 + b2i(by0)), by0 ∈ int2bytes(256 + b2i(by0)), ∀ by, bytes0. # bytes0 < #(bytes1 + by0 ') → int2bytes(bytes2int(i2b(0) ' + by ' + bytes0)) = i2b(0) ' + by ' + bytes0 ∧ 0 ≤ b2i(by) → false ⊦ true ∈ bytes2bits(bytes1), true ∈ byte2bits(i2b(0))
Used simplifier rules: ⊦ j < i ∧ i ≤ 0 → j < 0; (forward)% ⊦ by ' + bytes = bytes0 → by ∈ bytes0; (forward)% ⊦ (bytes + bytes0) + bytes1 = bytes + bytes0 + bytes1;% ⊦ bytes + by ' = bytes0 → by ∈ bytes0; (forward)% ⊦ i < 0 ∧ 0 ≤ j → i < j;% ⊦ i + (* j) < (* j0) ↔ i < j0 - j;% ⊦ (* j) ≤ i0 + (* j0) ↔ j - j0 ≤ i0;% ⊦ band(i, j) = band(j, i);% ⊦ band(i, band(i0, j)) = band(band(i, i0), j);% ⊦ i + j = j + i;% ⊦ i + j + i0 = (i + j) + i0;% ⊦ (b2i(by) + 1) % 256 = b2i(by) + 1;% ⊦ i < 0 → band(i, 255) = (i + 1) % 256 + 255;% ⊦ ¬ i ≤ j ↔ j < i;