| uint2bits(j) = false ' + true ' + bits, 0 ≤ j, false ∈ bits ⊦ 2 ^ n→i(# uint2bits(j).rest) = j + 1, false ∈ uint2bits(j).rest |
Used simplifier rules: ⊦ (boolvar ' + bits).rest = bits;% ⊦ (bits + bits0) + bits1 = bits + bits0 + bits1;% ⊦ #(bits + bits0) = # bits + # bits0;% ⊦ # boolvar ' = 0 +1;% ⊦ n→i(m + n) = n→i(m) + n→i(n);% ⊦ (m + n0) + n1 = m + n0 + n1;% ⊦ m + n = n + m;%⊦ ¬ boolvar ∈ boolvar0 ' + bits ↔ ¬(boolvar ↔ boolvar0) ∧ ¬ boolvar ∈ bits;