A Mechanically Checked Proof of the AMD5 K86 Floating Point Division Program (1998)

by J S Moore, T W Lynch, M Kaufmann
Venue:IEEE Trans. Computers