A formally verified sorting certifier (1997)

by J D Bright, G F Sullivan, G M Masson
Venue:IEEE Transactions on Computers