A Mechanically Checked Proof of (1999)

by D M Russinoff
Venue:Correctness of the AMD K5 Floating Point Square Root Microcode. Formal Methods in System Design