| b2i(by) = 0, int2bytes(b2i(by0)) = i2b(0) ' + by ' + bytes1 + by0 ', b2i(by0) < 256, 0 ≤ b2i(by0), i2b(0) ∈ int2bytes(b2i(by0)), by0 ∈ int2bytes(b2i(by0)), ∀ by, bytes0. # bytes0 < #(bytes1 + by0 ') → int2bytes(bytes2int(i2b(0) ' + by ' + bytes0)) = i2b(0) ' + by ' + bytes0 ∧ 0 ≤ b2i(by) → false ⊦ true ∈ bytes2bits(bytes1), true ∈ byte2bits(i2b(0)) |
0 ≤ i, i ≤ 127 ⊦ int2bytes(i) = i2b(i) '
Used simplifier rules: ⊦ b2i(by) ≤ 127;% ⊦ i ≤ j → (¬ ¬ j < i ↔ false);% ⊦ ¬ i ≤ j ↔ j < i;% ⊦ i2b(b2i(by)) = by;% ⊦ by ' = by0 ' + bytes ↔ by = by0 ∧ bytes = [];% ⊦ ¬ bytes + bytes0 ≠ [] ↔ bytes = [] ∧ bytes0 = [];% ⊦ by ' ≠ [];% ⊦ (bytes + bytes0) + bytes1 = bytes + bytes0 + bytes1; Used terms: b2i(by0)