Formal Verification of Hardware Components in Critical Systems

<table class="algorithm-group"><tr><td><table class="algorithm" id="alg12"><tr><td>(1)</td><td>Lemma <svg height="12.7178pt" id="M71" style="vertical-align:-3.42947pt" version="1.1" viewbox="-0.0498162 -9.28833 41.5646 12.7178" width="41.5646pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M530 686C535 705 530 712 521 712C504 712 448 684 359 674L358 648H393C437 648 439 646 429 593L400 435C372 447 345 448 332 448C286 448 194 414 144 373C68 311 23 203 23 111C23 26 57 -12 91 -12C120 -12 147 3 188 29C227 54 290 102 341 170H343L322 71C308 6 320 -12 341 -12C373 -12 442 27 501 96L485 120C455 91 422 67 408 67C401 67 401 76 404 91C440 294 479 473 530 686ZM387 375L355 241C326 187 200 53 142 53C126 53 109 73 109 130C109 217 154 337 218 381C240 396 265 404 297 404S372 390 387 375Z"></path></g><g transform="matrix(.013,0,0,-0.013,7.215,0)"><path d="M515 96L502 119C471 88 431 62 423 62C416 62 411 70 417 101C440 223 469 341 497 448H486L412 422L380 277C330 188 210 57 152 57C137 57 126 69 139 124L195 366C210 431 205 448 182 448C155 448 89 413 23 350L36 326C73 354 103 376 112 376C118 376 118 365 113 340L61 118C54 90 52 68 52 51C52 0 75 -12 98 -12S151 -3 181 17C242 58 305 119 362 193H364L345 104C323 3 339 -12 359 -12C390 -12 464 35 515 96Z"></path></g><g transform="matrix(.013,0,0,-0.013,16.385,0)"><path d="M483 97L471 123C436 91 401 65 392 65C388 65 384 74 390 106C414 239 444 378 457 429L455 433C444 433 429 436 416 439C392 444 368 448 344 448C281 448 204 415 152 376C71 315 23 205 23 103C23 21 57 -12 85 -12C114 -12 149 6 185 34C231 70 285 119 329 183H331L309 81C292 0 308 -12 326 -12C350 -12 421 24 483 97ZM374 387C370 363 356 291 345 261C315 193 181 50 139 50C124 50 110 71 110 118C110 224 153 331 218 379C238 394 271 402 301 402C329 402 359 394 374 387Z"></path></g><g transform="matrix(.013,0,0,-0.013,22.965,0)"><path d="M238 681C243 705 239 712 230 712C217 712 156 682 75 674L70 648H105C148 648 153 641 144 598L39 110C18 11 35 -12 55 -12C90 -12 166 36 221 103L205 125C174 93 130 65 118 65C112 65 108 68 114 96L238 681Z"></path></g><g transform="matrix(.013,0,0,-0.013,26.855,0)"><path d="M244 607C244 633 228 655 200 655C166 655 146 618 146 594C146 564 166 546 191 546C221 546 244 574 244 607ZM222 91L209 114C184 94 148 66 133 66C127 66 124 73 130 96L201 370C213 416 211 448 191 448C162 448 88 407 29 352L42 328C73 354 104 371 114 371C120 371 119 365 115 345L53 92C32 5 45 -12 68 -12C103 -12 186 50 222 91Z"></path></g><g transform="matrix(.013,0,0,-0.013,30.404,0)"><path d="M324 430H196L233 583L223 592L145 529L120 430H54L29 396L31 388H111L56 126C33 15 54 -12 77 -12C137 -12 214 57 250 95L233 119C208 92 155 59 138 59C126 59 120 70 131 125L186 390L298 394L324 430Z"></path></g><g transform="matrix(.013,0,0,-0.013,33.793,0)"><path d="M556 393C556 426 537 448 514 448C496 448 478 435 471 420C468 414 462 401 466 394C473 382 480 368 480 346C480 268 392 143 338 67H336C329 163 319 253 309 330S286 448 254 448C215 448 160 383 127 337L143 311C167 344 200 373 208 373S222 365 229 320C246 214 264 66 268 -20C219 -83 131 -171 17 -239L25 -261L137 -235C248 -110 273 -79 335 8C384 77 481 215 520 287C544 332 556 363 556 393Z"></path></g></svg>_check: <svg height="8.58131pt" id="M72" style="vertical-align:-0.04981041pt" version="1.1" viewbox="-0.0498162 -8.5315 7.57657 8.58131" width="7.57657pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M563 650H502L416 416H157L71 650H10L256 -15H317L563 650ZM397 366L287 68H286L176 366H397Z"></path></g></svg> x y,</td></tr><tr><td>(2)</td><td> sumexp (bexp x) (bexp y) <svg height="5.65839pt" id="M73" style="vertical-align:-0.04980993pt" version="1.1" viewbox="-0.0498162 -5.60858 7.75925 5.65839" width="7.75925pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M535 323V373H52V323H535ZM535 138V188H52V138H535Z"></path></g></svg> sumexp (bexp y) (bexp x) <svg height="6.27169pt" id="M74" style="vertical-align:-0.04980993pt" version="1.1" viewbox="-0.0498162 -6.22188 18.3548 6.27169" width="18.3548pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M567 230V280H69V230H567Z"></path></g><g transform="matrix(.013,0,0,-0.013,5.776,0)"><path d="M901 255C861 290 790 361 716 442L694 427L796 280H69V230H796L694 83L716 68C790 149 861 220 901 255Z"></path></g></svg></td></tr><tr><td>(3)</td><td>  prodexp (bexp x) (bexp y) <svg height="5.65839pt" id="M75" style="vertical-align:-0.04980993pt" version="1.1" viewbox="-0.0498162 -5.60858 7.75925 5.65839" width="7.75925pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M535 323V373H52V323H535ZM535 138V188H52V138H535Z"></path></g></svg> prodexp (bexp y) (bexp x).</td></tr></table></td></tr></table>

<div> Example of proof using the duality property.</div>

Wireless Communications and Mobile Computing

alg12

Listing 12

Listing 12: Formal Verification of Hardware Components in Critical Systems 