| uint2bits(i) = false ' + true ' + bits, 2 ^ (2 + n→i(# bits)) = 1 + bits2uint(bitsinvert(bits)) + 2 ^ (1 + n→i(# bits)) + i, 0 < i ⊦ 2 ^ (1 + n→i(# bits)) = 1 + bits2uint(bitsinvert(bits)) + i |
⊦ 0 < i → j ^ i = j ^ i -1 * j
0 < 2 + n→i(# bits), uint2bits(i) = false ' + true ' + bits, 2 ^ (2 + n→i(# bits))-1 * 2 = 1 + bits2uint(bitsinvert(bits)) + 2 ^ (1 + n→i(# bits)) + i, 0 < i ⊦ 2 ^ (1 + n→i(# bits)) = 1 + bits2uint(bitsinvert(bits)) + i
Used simplifier rules: ⊦ (* j) < i0 + (* j0) ↔ j - j0 < i0;%i < 0 ⊦ (* i) < n→i(n);% ⊦ i + j + i0 = (i + j) + i0;% ⊦ i + j = j + i; Used terms: 2 + n→i(# bits), 2