A Mechanically Checked Proof of Correctness of the AMD5K 86 Floating-Point Square Root Microcode (1997)

by D Russinoff
Venue:Formal Methods in System Design Special Issue on Arithmetic Circuits