| bitsand(false ' + bits0, true ') = false ' + bits1, ∀ bits, bits2, bits1. # bits < # bits0 → bitsand(false ' + bits, true ' + bits2) = false ' + bits1 → 2 ^ n→i(# bits) = 1 + bits2uint(bitsinvert(bits2)) % 2 ^ n→i(# bits) + bits2uint(bits1) ∨ false ∈ bits ⊦ 2 ^ n→i(# bits0) = 1 + bits2uint(bits1), false ∈ bits0 |
⊦ bits ≠ [] → bitsand(bits, true ') = bits
false ' + bits0 ≠ [], false ' + bits0 = false ' + bits1, ∀ bits, bits2, bits1. # bits < # bits0 → bitsand(false ' + bits, true ' + bits2) = false ' + bits1 → 2 ^ n→i(# bits) = 1 + bits2uint(bitsinvert(bits2)) % 2 ^ n→i(# bits) + bits2uint(bits1) ∨ false ∈ bits ⊦ 2 ^ n→i(# bits0) = 1 + bits2uint(bits1), false ∈ bits0
Used simplifier rules: ⊦ ¬ bits + bits0 ≠ [] ↔ bits = [] ∧ bits0 = [];% ⊦ boolvar ' ≠ [];% ⊦ (bits + bits0) + bits1 = bits + bits0 + bits1; Used terms: false ' + bits0