A mechanically checked proof of the AMD5K86 floating-point division program (1998)

by J S Moore, T W Lynch, M Kaufmann
Venue:IEEE Trans. Computers