A T M Mechanically Checked Proof of the AMD5K86 Floating-Point Division Program (1998)

by J S Moore, T W Lynch, M Kaufmann
Venue:IEEE Transactions on Computers