A mechanically checked proof of correctness of the AMD K5 floating point square root microcode (1999)

by D M Russinoff
Venue:Formal Methods in System Design