A Mechanically Checked Proof of the Correctness of the Kernel of the AMD5K86 Floating-Point Division Algorithm (1996)

by J Strother Moore, Tom Lynch, Matt Kaufmann
Venue:IEEE Transactions on Computers