• Top
  • Documentation
  • Books
  • Boolean-reasoning
  • Projects
  • Debugging
  • Std
  • Proof-automation
  • Macro-libraries
  • ACL2
  • Interfacing-tools
  • Hardware-verification
  • Software-verification
    • Kestrel-books
      • Crypto-hdwallet
      • Apt
      • Error-checking
      • Fty-extensions
      • Isar
      • Kestrel-utilities
      • Soft
      • Bv
      • Imp-language
      • C
      • Event-macros
      • Java
        • Atj
        • Aij
        • Language
          • Syntax
          • Semantics
            • Primitive-function-macros
            • Primitive-values
            • Floating-point-placeholders
            • Pointers
            • Floating-point-value-set-parameters
            • Values
            • Primitive-operations
              • Integer-operations
                • Long-long-ushiftr
                • Long-int-ushiftr
                • Int-long-ushiftr
                • Int-int-ushiftr
                • Long-long-shiftr
                • Long-long-shiftl
                • Long-int-shiftr
                • Long-int-shiftl
                • Int-long-shiftr
                • Int-int-shiftr
                • Int-long-shiftl
                • Int-int-shiftl
                • Long-xor
                • Long-neq
                • Long-lesseq
                • Long-ior
                • Long-greateq
                • Long-and
                • Int-xor
                • Int-ior
                • Int-greateq
                • Long-rem
                • Long-mul
                • Long-less
                • Long-great
                • Long-eq
                • Long-div
                • Long-add
                • Int-neq
                • Int-mul
                • Int-lesseq
                • Int-great
                • Int-eq
                • Int-and
                • Int-add
                • Long-sub
                • Int-sub
                • Int-rem
                • Int-less
                • Int-div
                • Long-plus
                • Long-not
                • Long-minus
                • Int-not
                • Int-minus
                • Int-plus
              • Floating-point-operations
              • Boolean-operations
            • Primitive-conversions
            • Reference-values
      • Bitcoin
      • Ethereum
      • Yul
      • Zcash
      • ACL2-programming-language
      • Prime-fields
      • Json
      • Syntheto
      • File-io-light
      • Number-theory
      • Cryptography
      • Lists-light
      • Builtins
      • Axe
      • Solidity
      • Helpers
      • Htclient
      • Typed-lists-light
      • Arithmetic-light
    • X86isa
    • Axe
    • Execloader
  • Math
  • Testing-utilities

• Integer-operations

Int-sub

Subtraction - on ints [JLS14:4.2.2] [JLS14:15.18.2].

Signature

(int-sub operand-left operand-right) → result

Arguments

operand-left — Guard (int-valuep operand-left).

operand-right — Guard (int-valuep operand-right).

Returns

result — Type (int-valuep result).

Definitions and Theorems

Function: int-sub

(defun int-sub (operand-left operand-right)
  (declare (xargs :guard (and (int-valuep operand-left)
                              (int-valuep operand-right))))
  (b* ((x (int-value->int operand-left))
       (y (int-value->int operand-right)))
    (int-value (logext 32 (- x y)))))

Theorem: int-valuep-of-int-sub

(defthm int-valuep-of-int-sub
  (b* ((result (int-sub operand-left operand-right)))
    (int-valuep result))
  :rule-classes :rewrite)

Theorem: int-sub-of-int-value-fix-operand-left

(defthm int-sub-of-int-value-fix-operand-left
  (equal (int-sub (int-value-fix operand-left)
                  operand-right)
         (int-sub operand-left operand-right)))

Theorem: int-sub-int-value-equiv-congruence-on-operand-left

(defthm int-sub-int-value-equiv-congruence-on-operand-left
  (implies (int-value-equiv operand-left operand-left-equiv)
           (equal (int-sub operand-left operand-right)
                  (int-sub operand-left-equiv operand-right)))
  :rule-classes :congruence)

Theorem: int-sub-of-int-value-fix-operand-right

(defthm int-sub-of-int-value-fix-operand-right
  (equal (int-sub operand-left
                  (int-value-fix operand-right))
         (int-sub operand-left operand-right)))

Theorem: int-sub-int-value-equiv-congruence-on-operand-right

(defthm int-sub-int-value-equiv-congruence-on-operand-right
  (implies (int-value-equiv operand-right operand-right-equiv)
           (equal (int-sub operand-left operand-right)
                  (int-sub operand-left operand-right-equiv)))
  :rule-classes :congruence)