Subtraction of a value of type
Function:
(defun sub-ullong-uint (x y) (declare (xargs :guard (and (ullongp x) (uintp y)))) (sub-ullong-ullong x (ullong-from-uint y)))
Theorem:
(defthm ullongp-of-sub-ullong-uint (ullongp (sub-ullong-uint x y)))
Theorem:
(defthm sub-ullong-uint-of-ullong-fix-x (equal (sub-ullong-uint (ullong-fix x) y) (sub-ullong-uint x y)))
Theorem:
(defthm sub-ullong-uint-ullong-equiv-congruence-on-x (implies (ullong-equiv x x-equiv) (equal (sub-ullong-uint x y) (sub-ullong-uint x-equiv y))) :rule-classes :congruence)
Theorem:
(defthm sub-ullong-uint-of-uint-fix-y (equal (sub-ullong-uint x (uint-fix y)) (sub-ullong-uint x y)))
Theorem:
(defthm sub-ullong-uint-uint-equiv-congruence-on-y (implies (uint-equiv y y-equiv) (equal (sub-ullong-uint x y) (sub-ullong-uint x y-equiv))) :rule-classes :congruence)