<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE why3session PUBLIC "-//Why3//proof session v5//EN"
"http://why3.lri.fr/why3session.dtd">
<why3session shape_version="6">
<prover id="0" name="Z3" version="4.12.2" timelimit="5" steplimit="0" memlimit="1000"/>
<prover id="2" name="Alt-Ergo" version="2.3.0" timelimit="5" steplimit="0" memlimit="1000"/>
<prover id="3" name="CVC4" version="1.7" timelimit="5" steplimit="0" memlimit="1000"/>
<prover id="5" name="Alt-Ergo" version="2.4.0" timelimit="5" steplimit="0" memlimit="1000"/>
<file format="whyml" proved="true">
<path name=".."/><path name="string_base64_encoding.mlw"/>
<theory name="Base64" proved="true">
 <goal name="int2b64&#39;vc" expl="VC for int2b64" proved="true">
 <proof prover="2" timelimit="1"><result status="valid" time="0.050000" steps="402"/></proof>
 </goal>
 <goal name="eq_symbol&#39;vc" expl="VC for eq_symbol" proved="true">
 <proof prover="2" timelimit="1"><result status="valid" time="0.010000" steps="10"/></proof>
 </goal>
 <goal name="int2b64_valid_4_char" proved="true">
 <proof prover="2" timelimit="1"><result status="valid" time="0.020000" steps="130"/></proof>
 </goal>
 <goal name="b642int&#39;vc" expl="VC for b642int" proved="true">
 <proof prover="2" timelimit="1"><result status="valid" time="0.290000" steps="1795"/></proof>
 </goal>
 <goal name="b642int_int2b64" proved="true">
 <proof prover="2" timelimit="1"><result status="valid" time="0.050000" steps="329"/></proof>
 </goal>
 <goal name="get_pad&#39;vc" expl="VC for get_pad" proved="true">
 <proof prover="2" timelimit="1"><result status="valid" time="0.790000" steps="2579"/></proof>
 </goal>
 <goal name="calc_pad_mod3" proved="true">
 <transf name="introduce_premises" proved="true" >
  <goal name="calc_pad_mod3.0" proved="true">
  <transf name="case" proved="true" arg1="(mod (length s) 3 = 0)">
   <goal name="calc_pad_mod3.0.0" expl="true case" proved="true">
   <proof prover="2"><result status="valid" time="0.020000" steps="14"/></proof>
   </goal>
   <goal name="calc_pad_mod3.0.1" expl="false case" proved="true">
   <transf name="case" proved="true" arg1="(mod (length s) 3 = 1)">
    <goal name="calc_pad_mod3.0.1.0" expl="false case (true case)" proved="true">
    <proof prover="2"><result status="valid" time="0.020000" steps="51"/></proof>
    </goal>
    <goal name="calc_pad_mod3.0.1.1" expl="false case" proved="true">
    <transf name="assert" proved="true" arg1="(mod (length s) 3 = 2)">
     <goal name="calc_pad_mod3.0.1.1.0" expl="asserted formula" proved="true">
     <proof prover="0"><result status="valid" time="0.010000" steps="27911"/></proof>
     </goal>
     <goal name="calc_pad_mod3.0.1.1.1" expl="false case" proved="true">
     <proof prover="2"><result status="valid" time="0.030000" steps="53"/></proof>
     </goal>
    </transf>
    </goal>
   </transf>
   </goal>
  </transf>
  </goal>
 </transf>
 </goal>
 <goal name="calc_pad&#39;vc" expl="VC for calc_pad" proved="true">
 <proof prover="2"><result status="valid" time="0.675994" steps="748"/></proof>
 </goal>
 <goal name="encoding_valid_b64&#39;vc" expl="VC for encoding_valid_b64" proved="true">
 <proof prover="2"><result status="valid" time="4.381103" steps="4136"/></proof>
 </goal>
 <goal name="decode_unique&#39;vc" expl="VC for decode_unique" proved="true">
 <transf name="split_vc" proved="true" >
  <goal name="decode_unique&#39;vc.0" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="decode_unique&#39;vc.0.0" expl="assertion" proved="true">
   <proof prover="0"><result status="valid" time="0.020000" steps="48438"/></proof>
   <transf name="remove" proved="true" arg1="real,bool,tuple0,unit,buffer,zero,one,(&gt;),empty,concat,lt,le,s_at,substring,prefixof,suffixof,contains,indexof,replace,replaceall,to_int,is_digit,from_int,code,get,eq_string,make,int63&#39;maxInt,int63&#39;minInt,min_int63,max_int63,to_int1,in_bounds,max_int,min_int,str,int2b64,valid_b64,Assoc,Unit_def_l,Unit_def_r,Inv_def_l,Inv_def_r,Comm,Assoc1,Mul_distr_l,Mul_distr_r,Comm1,Unitary,NonTrivialRing,Refl,Trans,Antisymm,Total,ZeroLessOne,CompatOrderAdd,CompatOrderMult,Abs_le,Abs_pos,Div_bound,Div_sign_pos,Div_sign_neg,Mod_sign_pos,Mod_sign_neg,Rounds_toward_zero,Div_1,Mod_1,Div_inf,Mod_inf,Div_mult,Mod_mult,concat_assoc,concat_empty,length_empty,length_concat,lt_empty,lt_not_com,lt_ref,lt_trans,le_empty,le_ref,lt_le,lt_le_eq,le_trans,at_out_of_range,at_empty,at_length,concat_at,substring_out_of_range,substring_of_length_zero_or_less,substring_of_empty,substring_smaller,substring_smaller_x,substring_length,substring_at,substring_substring,concat_substring,prefixof_substring,prefixof_concat,prefixof_empty,prefixof_empty2,suffixof_substring,suffixof_concat,suffixof_empty,suffixof_empty2,contains_prefixof,contains_suffixof,contains_empty,contains_empty2,contains_substring,contains_concat,contains_at,indexof_empty,indexof_empty1,indexof_contains,contains_indexof,not_contains_indexof,substring_indexof,indexof_out_of_range,indexof_in_range,indexof_contains_substring,replace_empty,replace_not_contains,replace_empty2,replace_substring_indexof,replaceall_empty1,not_contains_replaceall,to_int_gt_minus_1,to_int_empty,from_int_negative,from_int_to_int,char&#39;invariant,code,code_chr,chr_code,get,substring_get,concat_first,concat_second,extensionality,make_length,make_contents,to_int_in_bounds,extensionality1,max_int&#39;def,min_int&#39;def,int2b64_valid_4_char,b642int_int2b64,calc_pad_mod3,encoding_valid_b64">
    <goal name="decode_unique&#39;vc.0.0.0" expl="assertion" proved="true">
    <proof prover="0" timelimit="1"><result status="valid" time="0.010000" steps="15869"/></proof>
    </goal>
   </transf>
   </goal>
   <goal name="decode_unique&#39;vc.0.1" expl="assertion" proved="true">
   <proof prover="0"><result status="valid" time="0.020000" steps="59217"/></proof>
   <transf name="remove" proved="true" arg1="real,bool,tuple0,unit,buffer,zero,one,(&gt;),abs,empty,concat,lt,le,s_at,substring,prefixof,suffixof,contains,indexof,replace,replaceall,to_int,is_digit,from_int,code,get,eq_string,make,int63&#39;maxInt,int63&#39;minInt,min_int63,max_int63,to_int1,in_bounds,max_int,min_int,str,int2b64,Assoc,Unit_def_l,Unit_def_r,Inv_def_l,Inv_def_r,Comm,Assoc1,Mul_distr_l,Mul_distr_r,Comm1,Unitary,NonTrivialRing,Refl,Trans,Antisymm,Total,ZeroLessOne,CompatOrderAdd,CompatOrderMult,Abs_le,Abs_pos,Div_bound,Mod_bound,Div_sign_pos,Div_sign_neg,Mod_sign_pos,Mod_sign_neg,Rounds_toward_zero,Div_1,Mod_1,Div_inf,Mod_inf,Div_mult,Mod_mult,concat_assoc,concat_empty,length_empty,length_concat,lt_empty,lt_not_com,lt_ref,lt_trans,le_empty,le_ref,lt_le,lt_le_eq,le_trans,at_out_of_range,at_empty,at_length,concat_at,substring_out_of_range,substring_of_length_zero_or_less,substring_of_empty,substring_smaller,substring_smaller_x,substring_length,substring_at,substring_substring,concat_substring,prefixof_substring,prefixof_concat,prefixof_empty,prefixof_empty2,suffixof_substring,suffixof_concat,suffixof_empty,suffixof_empty2,contains_prefixof,contains_suffixof,contains_empty,contains_empty2,contains_substring,contains_concat,contains_at,indexof_empty,indexof_empty1,indexof_contains,contains_indexof,not_contains_indexof,substring_indexof,indexof_out_of_range,indexof_in_range,indexof_contains_substring,replace_empty,replace_not_contains,replace_empty2,replace_substring_indexof,replaceall_empty1,not_contains_replaceall,to_int_gt_minus_1,to_int_empty,from_int_negative,from_int_to_int,char&#39;invariant,code,code_chr,chr_code,get,substring_get,concat_first,concat_second,extensionality,make_length,make_contents,to_int_in_bounds,extensionality1,max_int&#39;def,min_int&#39;def,int2b64_valid_4_char,b642int_int2b64,H1,H2">
    <goal name="decode_unique&#39;vc.0.1.0" expl="assertion" proved="true">
    <proof prover="0" timelimit="1"><result status="valid" time="0.010000" steps="20493"/></proof>
    </goal>
   </transf>
   </goal>
   <goal name="decode_unique&#39;vc.0.2" expl="assertion" proved="true">
   <proof prover="0"><result status="valid" time="0.020000" steps="65126"/></proof>
   <transf name="remove" proved="true" arg1="real,bool,tuple0,unit,buffer,zero,one,(&gt;),empty,concat,lt,le,s_at,substring,prefixof,suffixof,contains,indexof,replace,replaceall,to_int,is_digit,from_int,code,get,eq_string,make,int63&#39;maxInt,int63&#39;minInt,min_int63,max_int63,to_int1,in_bounds,max_int,min_int,str,int2b64,valid_b64,Assoc,Unit_def_l,Unit_def_r,Inv_def_l,Inv_def_r,Comm,Assoc1,Mul_distr_l,Mul_distr_r,Comm1,Unitary,NonTrivialRing,Refl,Trans,Antisymm,Total,ZeroLessOne,CompatOrderAdd,CompatOrderMult,Abs_le,Abs_pos,Div_bound,Div_sign_pos,Div_sign_neg,Mod_sign_pos,Mod_sign_neg,Rounds_toward_zero,Div_1,Mod_1,Div_inf,Mod_inf,Div_mult,Mod_mult,concat_assoc,concat_empty,length_empty,length_concat,lt_empty,lt_not_com,lt_ref,lt_trans,le_empty,le_ref,lt_le,lt_le_eq,le_trans,at_out_of_range,at_empty,at_length,concat_at,substring_out_of_range,substring_of_length_zero_or_less,substring_of_empty,substring_smaller,substring_smaller_x,substring_length,substring_at,substring_substring,concat_substring,prefixof_substring,prefixof_concat,prefixof_empty,prefixof_empty2,suffixof_substring,suffixof_concat,suffixof_empty,suffixof_empty2,contains_prefixof,contains_suffixof,contains_empty,contains_empty2,contains_substring,contains_concat,contains_at,indexof_empty,indexof_empty1,indexof_contains,contains_indexof,not_contains_indexof,substring_indexof,indexof_out_of_range,indexof_in_range,indexof_contains_substring,replace_empty,replace_not_contains,replace_empty2,replace_substring_indexof,replaceall_empty1,not_contains_replaceall,to_int_gt_minus_1,to_int_empty,from_int_negative,from_int_to_int,char&#39;invariant,code,code_chr,chr_code,get,substring_get,concat_first,concat_second,extensionality,make_length,make_contents,to_int_in_bounds,extensionality1,max_int&#39;def,min_int&#39;def,int2b64_valid_4_char,b642int_int2b64,encoding_valid_b64,H1,H2,H3">
    <goal name="decode_unique&#39;vc.0.2.0" expl="assertion" proved="true">
    <proof prover="0" timelimit="1"><result status="valid" time="0.010000" steps="19056"/></proof>
    </goal>
   </transf>
   </goal>
  </transf>
  </goal>
  <goal name="decode_unique&#39;vc.1" expl="assertion" proved="true">
  <transf name="instantiate" proved="true" arg1="Assert" arg2="(div i 3)">
   <goal name="decode_unique&#39;vc.1.0" expl="assertion" proved="true">
   <proof prover="2"><result status="valid" time="0.080000" steps="211"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="decode_unique&#39;vc.2" expl="postcondition" proved="true">
  <transf name="apply" proved="true" arg1="extensionality">
   <goal name="decode_unique&#39;vc.2.0" expl="apply premises" proved="true">
   <proof prover="2"><result status="valid" time="0.110000" steps="119"/></proof>
   </goal>
  </transf>
  </goal>
 </transf>
 </goal>
 <goal name="encode_unique&#39;vc" expl="VC for encode_unique" proved="true">
 <transf name="split_vc" proved="true" >
  <goal name="encode_unique&#39;vc.0" expl="assertion" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="16"/></proof>
  </goal>
  <goal name="encode_unique&#39;vc.1" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="encode_unique&#39;vc.1.0" expl="assertion" proved="true">
   <transf name="unfold" proved="true" arg1="encoding" arg2="in" arg3="H3">
    <goal name="encode_unique&#39;vc.1.0.0" expl="assertion" proved="true">
    <transf name="split_premise_full" proved="true" >
     <goal name="encode_unique&#39;vc.1.0.0.0" expl="assertion" proved="true">
     <transf name="instantiate" proved="true" arg1="H12" arg2="i">
      <goal name="encode_unique&#39;vc.1.0.0.0.0" expl="assertion" proved="true">
      <proof prover="2"><result status="valid" time="3.270794" steps="4913"/></proof>
      </goal>
     </transf>
     </goal>
    </transf>
    </goal>
   </transf>
   </goal>
   <goal name="encode_unique&#39;vc.1.1" expl="assertion" proved="true">
   <transf name="unfold" proved="true" arg1="encoding" arg2="in" arg3="H5">
    <goal name="encode_unique&#39;vc.1.1.0" expl="assertion" proved="true">
    <transf name="split_premise_full" proved="true" >
     <goal name="encode_unique&#39;vc.1.1.0.0" expl="assertion" proved="true">
     <transf name="instantiate" proved="true" arg1="H14" arg2="i">
      <goal name="encode_unique&#39;vc.1.1.0.0.0" expl="assertion" proved="true">
      <transf name="instantiate" proved="true" arg1="H13" arg2="i">
       <goal name="encode_unique&#39;vc.1.1.0.0.0.0" expl="assertion" proved="true">
       <proof prover="2" timelimit="20"><result status="valid" time="16.350000" steps="19990"/></proof>
       </goal>
      </transf>
      </goal>
     </transf>
     </goal>
    </transf>
    </goal>
   </transf>
   </goal>
   <goal name="encode_unique&#39;vc.1.2" expl="assertion" proved="true">
   <transf name="unfold" proved="true" arg1="encoding" arg2="in" arg3="H7">
    <goal name="encode_unique&#39;vc.1.2.0" expl="assertion" proved="true">
    <transf name="split_premise_full" proved="true" >
     <goal name="encode_unique&#39;vc.1.2.0.0" expl="assertion" proved="true">
     <transf name="instantiate" proved="true" arg1="H14" arg2="i">
      <goal name="encode_unique&#39;vc.1.2.0.0.0" expl="assertion" proved="true">
      <transf name="instantiate" proved="true" arg1="H15" arg2="i">
       <goal name="encode_unique&#39;vc.1.2.0.0.0.0" expl="assertion" proved="true">
       <proof prover="2" timelimit="60"><result status="valid" time="26.320000" steps="25847"/></proof>
       </goal>
      </transf>
      </goal>
     </transf>
     </goal>
    </transf>
    </goal>
   </transf>
   </goal>
   <goal name="encode_unique&#39;vc.1.3" expl="assertion" proved="true">
   <transf name="unfold" proved="true" arg1="encoding" arg2="in" arg3="H8">
    <goal name="encode_unique&#39;vc.1.3.0" expl="assertion" proved="true">
    <transf name="split_premise_full" proved="true" >
     <goal name="encode_unique&#39;vc.1.3.0.0" expl="assertion" proved="true">
     <transf name="instantiate" proved="true" arg1="H15" arg2="i">
      <goal name="encode_unique&#39;vc.1.3.0.0.0" expl="assertion" proved="true">
      <proof prover="2" timelimit="60"><result status="valid" time="6.341003" steps="6028"/></proof>
      </goal>
     </transf>
     </goal>
    </transf>
    </goal>
   </transf>
   </goal>
   <goal name="encode_unique&#39;vc.1.4" expl="assertion" proved="true">
   <transf name="unfold" proved="true" arg1="encoding" arg2="in" arg3="H7">
    <goal name="encode_unique&#39;vc.1.4.0" expl="assertion" proved="true">
    <transf name="split_premise_full" proved="true" >
     <goal name="encode_unique&#39;vc.1.4.0.0" expl="assertion" proved="true">
     <transf name="instantiate" proved="true" arg1="H14" arg2="i">
      <goal name="encode_unique&#39;vc.1.4.0.0.0" expl="assertion" proved="true">
      <transf name="instantiate" proved="true" arg1="H15" arg2="i">
       <goal name="encode_unique&#39;vc.1.4.0.0.0.0" expl="assertion" proved="true">
       <proof prover="2" timelimit="60"><result status="valid" time="6.200674" steps="8404"/></proof>
       </goal>
      </transf>
      </goal>
     </transf>
     </goal>
    </transf>
    </goal>
   </transf>
   </goal>
   <goal name="encode_unique&#39;vc.1.5" expl="assertion" proved="true">
   <proof prover="2"><result status="valid" time="0.434656" steps="678"/></proof>
   </goal>
   <goal name="encode_unique&#39;vc.1.6" expl="assertion" proved="true">
   <transf name="unfold" proved="true" arg1="encoding" arg2="in" arg3="H5">
    <goal name="encode_unique&#39;vc.1.6.0" expl="assertion" proved="true">
    <transf name="split_premise_full" proved="true" >
     <goal name="encode_unique&#39;vc.1.6.0.0" expl="assertion" proved="true">
     <transf name="instantiate" proved="true" arg1="H13" arg2="i">
      <goal name="encode_unique&#39;vc.1.6.0.0.0" expl="assertion" proved="true">
      <transf name="instantiate" proved="true" arg1="H14" arg2="i">
       <goal name="encode_unique&#39;vc.1.6.0.0.0.0" expl="assertion" proved="true">
       <transf name="destruct" proved="true" arg1="Hinst">
        <goal name="encode_unique&#39;vc.1.6.0.0.0.0.0" expl="destruct premise" proved="true">
        <proof prover="2"><result status="valid" time="0.010000" steps="26"/></proof>
        </goal>
        <goal name="encode_unique&#39;vc.1.6.0.0.0.0.1" expl="assertion" proved="true">
        <transf name="destruct" proved="true" arg1="Hinst1">
         <goal name="encode_unique&#39;vc.1.6.0.0.0.0.1.0" expl="destruct premise" proved="true">
         <proof prover="2"><result status="valid" time="0.010000" steps="28"/></proof>
         </goal>
         <goal name="encode_unique&#39;vc.1.6.0.0.0.0.1.1" expl="assertion" proved="true">
         <transf name="eliminate_let" proved="true" >
          <goal name="encode_unique&#39;vc.1.6.0.0.0.0.1.1.0" expl="assertion" proved="true">
          <transf name="case" proved="true" arg1="(i*3+1 &lt; length s1)">
           <goal name="encode_unique&#39;vc.1.6.0.0.0.0.1.1.0.0" expl="true case (assertion)" proved="true">
           <proof prover="2"><result status="valid" time="0.010000" steps="28"/></proof>
           </goal>
           <goal name="encode_unique&#39;vc.1.6.0.0.0.0.1.1.0.1" expl="false case (assertion)" proved="true">
           <proof prover="2"><result status="valid" time="2.489941" steps="5132"/></proof>
           </goal>
          </transf>
          </goal>
         </transf>
         </goal>
        </transf>
        </goal>
       </transf>
       </goal>
      </transf>
      </goal>
     </transf>
     </goal>
    </transf>
    </goal>
   </transf>
   </goal>
   <goal name="encode_unique&#39;vc.1.7" expl="assertion" proved="true">
   <proof prover="2"><result status="valid" time="0.340000" steps="744"/></proof>
   </goal>
   <goal name="encode_unique&#39;vc.1.8" expl="assertion" proved="true">
   <proof prover="2"><result status="valid" time="0.280000" steps="494"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="encode_unique&#39;vc.2" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="encode_unique&#39;vc.2.0" expl="assertion" proved="true">
   <transf name="unfold" proved="true" arg1="encoding" arg2="in" arg3="H2">
    <goal name="encode_unique&#39;vc.2.0.0" expl="assertion" proved="true">
    <transf name="split_premise_full" proved="true" >
     <goal name="encode_unique&#39;vc.2.0.0.0" expl="assertion" proved="true">
     <transf name="instantiate" proved="true" arg1="H11" arg2="i">
      <goal name="encode_unique&#39;vc.2.0.0.0.0" expl="assertion" proved="true">
      <proof prover="2"><result status="valid" time="4.106876" steps="6961"/></proof>
      </goal>
     </transf>
     </goal>
    </transf>
    </goal>
   </transf>
   </goal>
   <goal name="encode_unique&#39;vc.2.1" expl="assertion" proved="true">
   <transf name="unfold" proved="true" arg1="encoding" arg2="in" arg3="H4">
    <goal name="encode_unique&#39;vc.2.1.0" expl="assertion" proved="true">
    <transf name="split_premise_full" proved="true" >
     <goal name="encode_unique&#39;vc.2.1.0.0" expl="assertion" proved="true">
     <transf name="instantiate" proved="true" arg1="H12" arg2="i">
      <goal name="encode_unique&#39;vc.2.1.0.0.0" expl="assertion" proved="true">
      <transf name="instantiate" proved="true" arg1="H13" arg2="i">
       <goal name="encode_unique&#39;vc.2.1.0.0.0.0" expl="assertion" proved="true">
       <proof prover="2" timelimit="30"><result status="valid" time="11.497899" steps="18820"/></proof>
       </goal>
      </transf>
      </goal>
     </transf>
     </goal>
    </transf>
    </goal>
   </transf>
   </goal>
   <goal name="encode_unique&#39;vc.2.2" expl="assertion" proved="true">
   <transf name="unfold" proved="true" arg1="encoding" arg2="in" arg3="H6">
    <goal name="encode_unique&#39;vc.2.2.0" expl="assertion" proved="true">
    <transf name="split_premise_full" proved="true" >
     <goal name="encode_unique&#39;vc.2.2.0.0" expl="assertion" proved="true">
     <transf name="instantiate" proved="true" arg1="H13" arg2="i">
      <goal name="encode_unique&#39;vc.2.2.0.0.0" expl="assertion" proved="true">
      <transf name="instantiate" proved="true" arg1="H14" arg2="i">
       <goal name="encode_unique&#39;vc.2.2.0.0.0.0" expl="assertion" proved="true">
       <proof prover="2" timelimit="60"><result status="valid" time="40.168194" steps="43157"/></proof>
       </goal>
      </transf>
      </goal>
     </transf>
     </goal>
    </transf>
    </goal>
   </transf>
   </goal>
   <goal name="encode_unique&#39;vc.2.3" expl="assertion" proved="true">
   <transf name="unfold" proved="true" arg1="encoding" arg2="in" arg3="H7">
    <goal name="encode_unique&#39;vc.2.3.0" expl="assertion" proved="true">
    <transf name="split_premise_full" proved="true" >
     <goal name="encode_unique&#39;vc.2.3.0.0" expl="assertion" proved="true">
     <transf name="instantiate" proved="true" arg1="H14" arg2="i">
      <goal name="encode_unique&#39;vc.2.3.0.0.0" expl="assertion" proved="true">
      <proof prover="2" timelimit="15"><result status="valid" time="4.326889" steps="3655"/></proof>
      </goal>
     </transf>
     </goal>
    </transf>
    </goal>
   </transf>
   </goal>
   <goal name="encode_unique&#39;vc.2.4" expl="assertion" proved="true">
   <transf name="unfold" proved="true" arg1="encoding" arg2="in" arg3="H6">
    <goal name="encode_unique&#39;vc.2.4.0" expl="assertion" proved="true">
    <transf name="split_premise_full" proved="true" >
     <goal name="encode_unique&#39;vc.2.4.0.0" expl="assertion" proved="true">
     <transf name="instantiate" proved="true" arg1="H13" arg2="i">
      <goal name="encode_unique&#39;vc.2.4.0.0.0" expl="assertion" proved="true">
      <transf name="instantiate" proved="true" arg1="H14" arg2="i">
       <goal name="encode_unique&#39;vc.2.4.0.0.0.0" expl="assertion" proved="true">
       <proof prover="2" timelimit="30"><result status="valid" time="4.023630" steps="4340"/></proof>
       </goal>
      </transf>
      </goal>
     </transf>
     </goal>
    </transf>
    </goal>
   </transf>
   </goal>
   <goal name="encode_unique&#39;vc.2.5" expl="assertion" proved="true">
   <proof prover="2"><result status="valid" time="0.433519" steps="706"/></proof>
   </goal>
   <goal name="encode_unique&#39;vc.2.6" expl="assertion" proved="true">
   <transf name="unfold" proved="true" arg1="encoding" arg2="in" arg3="H4">
    <goal name="encode_unique&#39;vc.2.6.0" expl="assertion" proved="true">
    <transf name="split_premise_full" proved="true" >
     <goal name="encode_unique&#39;vc.2.6.0.0" expl="assertion" proved="true">
     <transf name="instantiate" proved="true" arg1="H12" arg2="i">
      <goal name="encode_unique&#39;vc.2.6.0.0.0" expl="assertion" proved="true">
      <transf name="instantiate" proved="true" arg1="H13" arg2="i">
       <goal name="encode_unique&#39;vc.2.6.0.0.0.0" expl="assertion" proved="true">
       <transf name="destruct" proved="true" arg1="Hinst">
        <goal name="encode_unique&#39;vc.2.6.0.0.0.0.0" expl="destruct premise" proved="true">
        <proof prover="2"><result status="valid" time="0.010000" steps="26"/></proof>
        </goal>
        <goal name="encode_unique&#39;vc.2.6.0.0.0.0.1" expl="assertion" proved="true">
        <transf name="destruct" proved="true" arg1="Hinst1">
         <goal name="encode_unique&#39;vc.2.6.0.0.0.0.1.0" expl="destruct premise" proved="true">
         <proof prover="2"><result status="valid" time="0.010000" steps="28"/></proof>
         </goal>
         <goal name="encode_unique&#39;vc.2.6.0.0.0.0.1.1" expl="assertion" proved="true">
         <transf name="eliminate_let" proved="true" >
          <goal name="encode_unique&#39;vc.2.6.0.0.0.0.1.1.0" expl="assertion" proved="true">
          <transf name="case" proved="true" arg1="(i*3+1 &lt; length s1)">
           <goal name="encode_unique&#39;vc.2.6.0.0.0.0.1.1.0.0" expl="true case (assertion)" proved="true">
           <proof prover="2"><result status="valid" time="0.020000" steps="28"/></proof>
           </goal>
           <goal name="encode_unique&#39;vc.2.6.0.0.0.0.1.1.0.1" expl="false case (assertion)" proved="true">
           <proof prover="2"><result status="valid" time="2.110746" steps="4046"/></proof>
           </goal>
          </transf>
          </goal>
         </transf>
         </goal>
        </transf>
        </goal>
       </transf>
       </goal>
      </transf>
      </goal>
     </transf>
     </goal>
    </transf>
    </goal>
   </transf>
   </goal>
   <goal name="encode_unique&#39;vc.2.7" expl="assertion" proved="true">
   <proof prover="2"><result status="valid" time="0.400000" steps="784"/></proof>
   </goal>
   <goal name="encode_unique&#39;vc.2.8" expl="assertion" proved="true">
   <proof prover="2"><result status="valid" time="0.180000" steps="522"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="encode_unique&#39;vc.3" expl="assertion" proved="true">
  <transf name="instantiate" proved="true" arg1="Assert" arg2="i">
   <goal name="encode_unique&#39;vc.3.0" expl="assertion" proved="true">
   <transf name="instantiate" proved="true" arg1="Assert1" arg2="i">
    <goal name="encode_unique&#39;vc.3.0.0" expl="assertion" proved="true">
    <transf name="split_vc" proved="true" >
     <goal name="encode_unique&#39;vc.3.0.0.0" expl="VC for encode_unique" proved="true">
     <proof prover="2"><result status="valid" time="0.020000" steps="24"/></proof>
     </goal>
     <goal name="encode_unique&#39;vc.3.0.0.1" expl="VC for encode_unique" proved="true">
     <proof prover="2"><result status="valid" time="0.020000" steps="26"/></proof>
     </goal>
     <goal name="encode_unique&#39;vc.3.0.0.2" expl="VC for encode_unique" proved="true">
     <proof prover="2"><result status="valid" time="0.020000" steps="29"/></proof>
     </goal>
     <goal name="encode_unique&#39;vc.3.0.0.3" expl="VC for encode_unique" proved="true">
     <proof prover="2"><result status="valid" time="0.020000" steps="29"/></proof>
     </goal>
    </transf>
    </goal>
   </transf>
   </goal>
  </transf>
  </goal>
  <goal name="encode_unique&#39;vc.4" expl="assertion" proved="true">
  <transf name="instantiate" proved="true" arg1="Assert" arg2="(div i 4)">
   <goal name="encode_unique&#39;vc.4.0" expl="assertion" proved="true">
   <proof prover="2"><result status="valid" time="0.040000" steps="115"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="encode_unique&#39;vc.5" expl="assertion" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="63"/></proof>
  </goal>
  <goal name="encode_unique&#39;vc.6" expl="postcondition" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="20"/></proof>
  </goal>
 </transf>
 </goal>
 <goal name="encode&#39;vc" expl="VC for encode" proved="true">
 <transf name="split_vc" proved="true" >
  <goal name="encode&#39;vc.0" expl="precondition" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.060000" steps="12"/></proof>
  </goal>
  <goal name="encode&#39;vc.1" expl="precondition" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="38"/></proof>
  </goal>
  <goal name="encode&#39;vc.2" expl="loop invariant init" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="encode&#39;vc.2.0" expl="loop invariant init" proved="true">
   <proof prover="2"><result status="valid" time="0.010000" steps="14"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="encode&#39;vc.3" expl="loop invariant init" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="15"/></proof>
  </goal>
  <goal name="encode&#39;vc.4" expl="loop invariant init" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="66"/></proof>
  </goal>
  <goal name="encode&#39;vc.5" expl="loop invariant init" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.020000" steps="21"/></proof>
  </goal>
  <goal name="encode&#39;vc.6" expl="integer overflow" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="29"/></proof>
  </goal>
  <goal name="encode&#39;vc.7" expl="precondition" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.030000" steps="107"/></proof>
  </goal>
  <goal name="encode&#39;vc.8" expl="integer overflow" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="31"/></proof>
  </goal>
  <goal name="encode&#39;vc.9" expl="precondition" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.040000" steps="119"/></proof>
  </goal>
  <goal name="encode&#39;vc.10" expl="precondition" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.010000" steps="31"/></proof>
  </goal>
  <goal name="encode&#39;vc.11" expl="division by zero" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="33"/></proof>
  </goal>
  <goal name="encode&#39;vc.12" expl="integer overflow" proved="true">
  <proof prover="2"><result status="valid" time="0.090000" steps="212"/></proof>
  </goal>
  <goal name="encode&#39;vc.13" expl="division by zero" proved="true">
  <proof prover="2"><result status="valid" time="0.030000" steps="37"/></proof>
  </goal>
  <goal name="encode&#39;vc.14" expl="integer overflow" proved="true">
  <proof prover="2"><result status="valid" time="0.150000" steps="243"/></proof>
  </goal>
  <goal name="encode&#39;vc.15" expl="division by zero" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="41"/></proof>
  </goal>
  <goal name="encode&#39;vc.16" expl="integer overflow" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="encode&#39;vc.16.0" expl="integer overflow" proved="true">
   <proof prover="2"><result status="valid" time="0.280000" steps="319"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="encode&#39;vc.17" expl="integer overflow" proved="true">
  <proof prover="2"><result status="valid" time="0.160000" steps="249"/></proof>
  </goal>
  <goal name="encode&#39;vc.18" expl="integer overflow" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.228618" steps="275"/></proof>
  </goal>
  <goal name="encode&#39;vc.19" expl="division by zero" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.100000" steps="49"/></proof>
  </goal>
  <goal name="encode&#39;vc.20" expl="integer overflow" proved="true">
  <proof prover="2"><result status="valid" time="0.378103" steps="381"/></proof>
  </goal>
  <goal name="encode&#39;vc.21" expl="division by zero" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="encode&#39;vc.21.0" expl="division by zero" proved="true">
   <proof prover="2"><result status="valid" time="0.020000" steps="53"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="encode&#39;vc.22" expl="integer overflow" proved="true">
  <proof prover="2"><result status="valid" time="1.395056" steps="766"/></proof>
  </goal>
  <goal name="encode&#39;vc.23" expl="integer overflow" proved="true">
  <proof prover="2"><result status="valid" time="2.546701" steps="1118"/></proof>
  </goal>
  <goal name="encode&#39;vc.24" expl="integer overflow" proved="true">
  <proof prover="2"><result status="valid" time="1.843623" steps="574"/></proof>
  </goal>
  <goal name="encode&#39;vc.25" expl="division by zero" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="61"/></proof>
  </goal>
  <goal name="encode&#39;vc.26" expl="integer overflow" proved="true">
  <proof prover="0" timelimit="1"><result status="valid" time="0.020000" steps="58112"/></proof>
  </goal>
  <goal name="encode&#39;vc.27" expl="precondition" proved="true">
  <transf name="instantiate" proved="true" arg1="LoopInvariant" arg2="(div (length r - 3) 4)">
   <goal name="encode&#39;vc.27.0" expl="precondition" proved="true">
   <proof prover="2"><result status="valid" time="1.040000" steps="849"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="encode&#39;vc.28" expl="precondition" proved="true">
  <transf name="instantiate" proved="true" arg1="LoopInvariant" arg2="(div (length r - 2) 4)">
   <goal name="encode&#39;vc.28.0" expl="precondition" proved="true">
   <proof prover="2"><result status="valid" time="1.116030" steps="794"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="encode&#39;vc.29" expl="precondition" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="encode&#39;vc.29.0" expl="precondition" proved="true">
   <proof prover="2"><result status="valid" time="0.280000" steps="380"/></proof>
   </goal>
   <goal name="encode&#39;vc.29.1" expl="precondition" proved="true">
   <proof prover="2" timelimit="15"><result status="valid" time="0.650000" steps="620"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="encode&#39;vc.30" expl="precondition" proved="true">
  <proof prover="2"><result status="valid" time="0.480000" steps="570"/></proof>
  </goal>
  <goal name="encode&#39;vc.31" expl="integer overflow" proved="true">
  <proof prover="2"><result status="valid" time="0.080000" steps="73"/></proof>
  </goal>
  <goal name="encode&#39;vc.32" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="encode&#39;vc.32.0" expl="assertion" proved="true">
   <proof prover="2" timelimit="10"><result status="valid" time="7.890000" steps="6519"/></proof>
   </goal>
   <goal name="encode&#39;vc.32.1" expl="assertion" proved="true">
   <proof prover="2" timelimit="15"><result status="valid" time="7.129810" steps="5879"/></proof>
   </goal>
   <goal name="encode&#39;vc.32.2" expl="assertion" proved="true">
   <proof prover="2" timelimit="15"><result status="valid" time="9.589252" steps="6530"/></proof>
   </goal>
   <goal name="encode&#39;vc.32.3" expl="assertion" proved="true">
   <proof prover="2"><result status="valid" time="0.888892" steps="648"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="encode&#39;vc.33" expl="assertion" proved="true">
  <proof prover="2"><result status="valid" time="3.869045" steps="2247"/></proof>
  </goal>
  <goal name="encode&#39;vc.34" expl="loop variant decrease" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="83"/></proof>
  </goal>
  <goal name="encode&#39;vc.35" expl="loop invariant preservation" proved="true">
  <proof prover="2"><result status="valid" time="0.030000" steps="83"/></proof>
  </goal>
  <goal name="encode&#39;vc.36" expl="loop invariant preservation" proved="true">
  <proof prover="2"><result status="valid" time="0.140000" steps="86"/></proof>
  </goal>
  <goal name="encode&#39;vc.37" expl="loop invariant preservation" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="encode&#39;vc.37.0" expl="loop invariant preservation" proved="true">
   <proof prover="2"><result status="valid" time="0.030000" steps="86"/></proof>
   </goal>
   <goal name="encode&#39;vc.37.1" expl="loop invariant preservation" proved="true">
   <proof prover="2"><result status="valid" time="0.958862" steps="638"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="encode&#39;vc.38" expl="loop invariant preservation" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="encode&#39;vc.38.0" expl="loop invariant preservation" proved="true">
   <proof prover="2"><result status="valid" time="0.720000" steps="791"/></proof>
   </goal>
   <goal name="encode&#39;vc.38.1" expl="loop invariant preservation" proved="true">
   <proof prover="2"><result status="valid" time="0.867913" steps="960"/></proof>
   </goal>
   <goal name="encode&#39;vc.38.2" expl="loop invariant preservation" proved="true">
   <proof prover="2"><result status="valid" time="1.136830" steps="1071"/></proof>
   </goal>
   <goal name="encode&#39;vc.38.3" expl="loop invariant preservation" proved="true">
   <proof prover="2"><result status="valid" time="1.128521" steps="973"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="encode&#39;vc.39" expl="assertion" proved="true">
  <transf name="instantiate" proved="true" arg1="LoopInvariant" arg2="(div (length r - 2) 4)">
   <goal name="encode&#39;vc.39.0" expl="assertion" proved="true">
   <proof prover="2"><result status="valid" time="1.064393" steps="898"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="encode&#39;vc.40" expl="assertion" proved="true">
  <transf name="instantiate" proved="true" arg1="LoopInvariant" arg2="(div (length r - 3) 4)">
   <goal name="encode&#39;vc.40.0" expl="assertion" proved="true">
   <proof prover="2"><result status="valid" time="2.149162" steps="2013"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="encode&#39;vc.41" expl="integer overflow" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.120000" steps="158"/></proof>
  </goal>
  <goal name="encode&#39;vc.42" expl="precondition" proved="true">
  <proof prover="2"><result status="valid" time="0.140000" steps="395"/></proof>
  </goal>
  <goal name="encode&#39;vc.43" expl="precondition" proved="true">
  <proof prover="2"><result status="valid" time="0.040000" steps="150"/></proof>
  </goal>
  <goal name="encode&#39;vc.44" expl="postcondition" proved="true">
  <transf name="unfold" proved="true" arg1="encoding">
   <goal name="encode&#39;vc.44.0" expl="VC for encode" proved="true">
   <transf name="split_vc" proved="true" >
    <goal name="encode&#39;vc.44.0.0" expl="VC for encode" proved="true">
    <proof prover="2"><result status="valid" time="0.488636" steps="883"/></proof>
    </goal>
    <goal name="encode&#39;vc.44.0.1" expl="VC for encode" proved="true">
    <transf name="instantiate" proved="true" arg1="LoopInvariant" arg2="i">
     <goal name="encode&#39;vc.44.0.1.0" expl="VC for encode" proved="true">
     <transf name="remove" proved="true" arg1="Assert">
      <goal name="encode&#39;vc.44.0.1.0.0" expl="VC for encode" proved="true">
      <transf name="remove" proved="true" arg1="Assert">
       <goal name="encode&#39;vc.44.0.1.0.0.0" expl="VC for encode" proved="true">
       <proof prover="2" timelimit="10"><result status="valid" time="8.491009" steps="8071"/></proof>
       </goal>
      </transf>
      </goal>
     </transf>
     </goal>
    </transf>
    </goal>
    <goal name="encode&#39;vc.44.0.2" expl="VC for encode" proved="true">
    <transf name="instantiate" proved="true" arg1="LoopInvariant" arg2="i">
     <goal name="encode&#39;vc.44.0.2.0" expl="VC for encode" proved="true">
     <transf name="remove" proved="true" arg1="Assert">
      <goal name="encode&#39;vc.44.0.2.0.0" expl="VC for encode" proved="true">
      <transf name="remove" proved="true" arg1="Assert">
       <goal name="encode&#39;vc.44.0.2.0.0.0" expl="VC for encode" proved="true">
       <proof prover="2" timelimit="15"><result status="valid" time="15.373837" steps="12864"/></proof>
       </goal>
      </transf>
      </goal>
     </transf>
     </goal>
    </transf>
    </goal>
    <goal name="encode&#39;vc.44.0.3" expl="VC for encode" proved="true">
    <transf name="instantiate" proved="true" arg1="LoopInvariant" arg2="i">
     <goal name="encode&#39;vc.44.0.3.0" expl="VC for encode" proved="true">
     <transf name="remove" proved="true" arg1="Assert">
      <goal name="encode&#39;vc.44.0.3.0.0" expl="VC for encode" proved="true">
      <transf name="remove" proved="true" arg1="Assert">
       <goal name="encode&#39;vc.44.0.3.0.0.0" expl="VC for encode" proved="true">
       <proof prover="2" timelimit="20"><result status="valid" time="11.916511" steps="10866"/></proof>
       </goal>
      </transf>
      </goal>
     </transf>
     </goal>
    </transf>
    </goal>
    <goal name="encode&#39;vc.44.0.4" expl="VC for encode" proved="true">
    <transf name="assert" proved="true" arg1="(forall i. 0 &lt;= i &lt; b -&gt; valid_b64_char r2[i*4] &amp;&amp; valid_b64_char r2[i*4+1] &amp;&amp; valid_b64_char r2[i*4+2] &amp;&amp; valid_b64_char r2[i*4+3])">
     <goal name="encode&#39;vc.44.0.4.0" expl="asserted formula" proved="true">
     <transf name="instantiate" proved="true" arg1="LoopInvariant" arg2="i">
      <goal name="encode&#39;vc.44.0.4.0.0" expl="asserted formula" proved="true">
      <transf name="split_vc" proved="true" >
       <goal name="encode&#39;vc.44.0.4.0.0.0" expl="asserted formula" proved="true">
       <proof prover="0"><result status="valid" time="0.030000" steps="84093"/></proof>
       </goal>
       <goal name="encode&#39;vc.44.0.4.0.0.1" expl="asserted formula" proved="true">
       <proof prover="0"><result status="valid" time="0.030000" steps="85942"/></proof>
       </goal>
       <goal name="encode&#39;vc.44.0.4.0.0.2" expl="asserted formula" proved="true">
       <proof prover="0"><result status="valid" time="0.030000" steps="87596"/></proof>
       </goal>
       <goal name="encode&#39;vc.44.0.4.0.0.3" expl="asserted formula" proved="true">
       <proof prover="0"><result status="valid" time="0.030000" steps="88223"/></proof>
       </goal>
      </transf>
      </goal>
     </transf>
     </goal>
     <goal name="encode&#39;vc.44.0.4.1" expl="VC for encode" proved="true">
     <transf name="assert" proved="true" arg1="(forall i. 0 &lt;= i &lt; o -&gt; r[i] = r1[i] = r2[i])">
      <goal name="encode&#39;vc.44.0.4.1.0" expl="asserted formula" proved="true">
      <proof prover="2"><result status="valid" time="0.170000" steps="402"/></proof>
      </goal>
      <goal name="encode&#39;vc.44.0.4.1.1" expl="VC for encode" proved="true">
      <transf name="instantiate" proved="true" arg1="h1" arg2="(div i 4)">
       <goal name="encode&#39;vc.44.0.4.1.1.0" expl="VC for encode" proved="true">
       <transf name="remove" proved="true" arg1="Assert">
        <goal name="encode&#39;vc.44.0.4.1.1.0.0" expl="VC for encode" proved="true">
        <transf name="remove" proved="true" arg1="Assert">
         <goal name="encode&#39;vc.44.0.4.1.1.0.0.0" expl="VC for encode" proved="true">
         <proof prover="2"><result status="valid" time="2.013338" steps="3598"/></proof>
         </goal>
        </transf>
        </goal>
       </transf>
       </goal>
      </transf>
      </goal>
     </transf>
     </goal>
    </transf>
    </goal>
    <goal name="encode&#39;vc.44.0.5" expl="VC for encode" proved="true">
    <transf name="assert" proved="true" arg1="(get_pad r = padding)">
     <goal name="encode&#39;vc.44.0.5.0" expl="asserted formula" proved="true">
     <transf name="assert" proved="true" arg1="(forall i. 0 &lt;= i &lt; length r1 -&gt; r1[i] &lt;&gt; eq_symbol)">
      <goal name="encode&#39;vc.44.0.5.0.0" expl="asserted formula" proved="true">
      <transf name="assert" proved="true" arg1="(forall i. 0 &lt;= i &lt; 64 -&gt; int2b64 i &lt;&gt; eq_symbol)">
       <goal name="encode&#39;vc.44.0.5.0.0.0" expl="asserted formula" proved="true">
       <proof prover="3"><result status="valid" time="0.260000" steps="33545"/></proof>
       </goal>
       <goal name="encode&#39;vc.44.0.5.0.0.1" expl="asserted formula" proved="true">
       <transf name="introduce_premises" proved="true" >
        <goal name="encode&#39;vc.44.0.5.0.0.1.0" expl="asserted formula" proved="true">
        <transf name="instantiate" proved="true" arg1="LoopInvariant" arg2="(div i 4)">
         <goal name="encode&#39;vc.44.0.5.0.0.1.0.0" expl="asserted formula" proved="true">
         <proof prover="5"><result status="valid" time="0.743476" steps="5516"/></proof>
         </goal>
        </transf>
        </goal>
       </transf>
       </goal>
      </transf>
      </goal>
      <goal name="encode&#39;vc.44.0.5.0.1" expl="asserted formula" proved="true">
      <proof prover="3"><result status="valid" time="0.610000" steps="60001"/></proof>
      </goal>
     </transf>
     </goal>
     <goal name="encode&#39;vc.44.0.5.1" expl="VC for encode" proved="true">
     <proof prover="2"><result status="valid" time="0.300000" steps="680"/></proof>
     </goal>
    </transf>
    </goal>
    <goal name="encode&#39;vc.44.0.6" expl="VC for encode" proved="true">
    <proof prover="2"><result status="valid" time="0.030000" steps="43"/></proof>
    </goal>
    <goal name="encode&#39;vc.44.0.7" expl="VC for encode" proved="true">
    <transf name="assert" proved="true" arg1="(get_pad r = padding)">
     <goal name="encode&#39;vc.44.0.7.0" expl="asserted formula" proved="true">
     <transf name="assert" proved="true" arg1="(forall i. 0 &lt;= i &lt; length r1 -&gt; r1[i] &lt;&gt; eq_symbol)">
      <goal name="encode&#39;vc.44.0.7.0.0" expl="asserted formula" proved="true">
      <transf name="assert" proved="true" arg1="(forall i. 0 &lt;= i &lt; 64 -&gt; int2b64 i &lt;&gt; eq_symbol)">
       <goal name="encode&#39;vc.44.0.7.0.0.0" expl="asserted formula" proved="true">
       <proof prover="3"><result status="valid" time="0.180000" steps="33033"/></proof>
       </goal>
       <goal name="encode&#39;vc.44.0.7.0.0.1" expl="asserted formula" proved="true">
       <transf name="introduce_premises" proved="true" >
        <goal name="encode&#39;vc.44.0.7.0.0.1.0" expl="asserted formula" proved="true">
        <transf name="instantiate" proved="true" arg1="LoopInvariant" arg2="(div i 4)">
         <goal name="encode&#39;vc.44.0.7.0.0.1.0.0" expl="asserted formula" proved="true">
         <proof prover="5"><result status="valid" time="0.798606" steps="5836"/></proof>
         </goal>
        </transf>
        </goal>
       </transf>
       </goal>
      </transf>
      </goal>
      <goal name="encode&#39;vc.44.0.7.0.1" expl="asserted formula" proved="true">
      <proof prover="3"><result status="valid" time="0.558068" steps="57692"/></proof>
      </goal>
     </transf>
     </goal>
     <goal name="encode&#39;vc.44.0.7.1" expl="VC for encode" proved="true">
     <proof prover="2"><result status="valid" time="0.460754" steps="735"/></proof>
     </goal>
    </transf>
    </goal>
    <goal name="encode&#39;vc.44.0.8" expl="VC for encode" proved="true">
    <proof prover="2"><result status="valid" time="0.080000" steps="266"/></proof>
    </goal>
    <goal name="encode&#39;vc.44.0.9" expl="VC for encode" proved="true">
    <proof prover="2"><result status="valid" time="0.050000" steps="45"/></proof>
    </goal>
    <goal name="encode&#39;vc.44.0.10" expl="VC for encode" proved="true">
    <transf name="assert" proved="true" arg1="(get_pad r = padding)">
     <goal name="encode&#39;vc.44.0.10.0" expl="asserted formula" proved="true">
     <transf name="assert" proved="true" arg1="(forall i. 0 &lt;= i &lt; length r1 -&gt; r1[i] &lt;&gt; eq_symbol)">
      <goal name="encode&#39;vc.44.0.10.0.0" expl="asserted formula" proved="true">
      <transf name="assert" proved="true" arg1="(forall i. 0 &lt;= i &lt; 64 -&gt; int2b64 i &lt;&gt; eq_symbol)">
       <goal name="encode&#39;vc.44.0.10.0.0.0" expl="asserted formula" proved="true">
       <proof prover="3"><result status="valid" time="0.310000" steps="36722"/></proof>
       </goal>
       <goal name="encode&#39;vc.44.0.10.0.0.1" expl="asserted formula" proved="true">
       <transf name="introduce_premises" proved="true" >
        <goal name="encode&#39;vc.44.0.10.0.0.1.0" expl="asserted formula" proved="true">
        <transf name="instantiate" proved="true" arg1="LoopInvariant" arg2="(div i 4)">
         <goal name="encode&#39;vc.44.0.10.0.0.1.0.0" expl="asserted formula" proved="true">
         <proof prover="5"><result status="valid" time="0.783772" steps="5905"/></proof>
         </goal>
        </transf>
        </goal>
       </transf>
       </goal>
      </transf>
      </goal>
      <goal name="encode&#39;vc.44.0.10.0.1" expl="asserted formula" proved="true">
      <proof prover="3"><result status="valid" time="0.240000" steps="33024"/></proof>
      </goal>
     </transf>
     </goal>
     <goal name="encode&#39;vc.44.0.10.1" expl="VC for encode" proved="true">
     <proof prover="2"><result status="valid" time="0.020000" steps="39"/></proof>
     </goal>
    </transf>
    </goal>
   </transf>
   </goal>
  </transf>
  </goal>
 </transf>
 </goal>
 <goal name="decode&#39;vc" expl="VC for decode" proved="true">
 <transf name="split_vc" proved="true" >
  <goal name="decode&#39;vc.0" expl="loop invariant init" proved="true">
  <proof prover="0" timelimit="1"><result status="valid" time="0.020000" steps="34550"/></proof>
  </goal>
  <goal name="decode&#39;vc.1" expl="loop invariant init" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="17"/></proof>
  </goal>
  <goal name="decode&#39;vc.2" expl="loop invariant init" proved="true">
  <proof prover="2"><result status="valid" time="0.010000" steps="18"/></proof>
  </goal>
  <goal name="decode&#39;vc.3" expl="loop invariant init" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.020000" steps="21"/></proof>
  </goal>
  <goal name="decode&#39;vc.4" expl="integer overflow" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="29"/></proof>
  </goal>
  <goal name="decode&#39;vc.5" expl="precondition" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.020000" steps="77"/></proof>
  </goal>
  <goal name="decode&#39;vc.6" expl="integer overflow" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="31"/></proof>
  </goal>
  <goal name="decode&#39;vc.7" expl="precondition" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.020000" steps="89"/></proof>
  </goal>
  <goal name="decode&#39;vc.8" expl="integer overflow" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="33"/></proof>
  </goal>
  <goal name="decode&#39;vc.9" expl="precondition" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.030000" steps="103"/></proof>
  </goal>
  <goal name="decode&#39;vc.10" expl="precondition" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.010000" steps="33"/></proof>
  </goal>
  <goal name="decode&#39;vc.11" expl="precondition" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="decode&#39;vc.11.0" expl="precondition" proved="true">
   <proof prover="2" timelimit="30"><result status="valid" time="0.080000" steps="197"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="decode&#39;vc.12" expl="division by zero" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.010000" steps="35"/></proof>
  </goal>
  <goal name="decode&#39;vc.13" expl="integer overflow" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.010000" steps="139"/></proof>
  </goal>
  <goal name="decode&#39;vc.14" expl="precondition" proved="true">
  <proof prover="2" timelimit="20"><result status="valid" time="0.140000" steps="369"/></proof>
  </goal>
  <goal name="decode&#39;vc.15" expl="integer overflow" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.060000" steps="189"/></proof>
  </goal>
  <goal name="decode&#39;vc.16" expl="integer overflow" proved="true">
  <proof prover="2"><result status="valid" time="0.230000" steps="284"/></proof>
  </goal>
  <goal name="decode&#39;vc.17" expl="precondition" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="decode&#39;vc.17.0" expl="precondition" proved="true">
   <proof prover="2"><result status="valid" time="0.160000" steps="432"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="decode&#39;vc.18" expl="division by zero" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.010000" steps="45"/></proof>
  </goal>
  <goal name="decode&#39;vc.19" expl="integer overflow" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.090000" steps="279"/></proof>
  </goal>
  <goal name="decode&#39;vc.20" expl="precondition" proved="true">
  <proof prover="2" timelimit="10"><result status="valid" time="0.260000" steps="626"/></proof>
  </goal>
  <goal name="decode&#39;vc.21" expl="division by zero" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.020000" steps="49"/></proof>
  </goal>
  <goal name="decode&#39;vc.22" expl="integer overflow" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.230000" steps="355"/></proof>
  </goal>
  <goal name="decode&#39;vc.23" expl="integer overflow" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.370000" steps="506"/></proof>
  </goal>
  <goal name="decode&#39;vc.24" expl="integer overflow" proved="true">
  <proof prover="2"><result status="valid" time="0.850000" steps="665"/></proof>
  </goal>
  <goal name="decode&#39;vc.25" expl="precondition" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.420000" steps="722"/></proof>
  </goal>
  <goal name="decode&#39;vc.26" expl="precondition" proved="true">
  <proof prover="2"><result status="valid" time="0.410000" steps="734"/></proof>
  </goal>
  <goal name="decode&#39;vc.27" expl="division by zero" proved="true">
  <proof prover="2"><result status="valid" time="0.020000" steps="59"/></proof>
  </goal>
  <goal name="decode&#39;vc.28" expl="integer overflow" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.400000" steps="421"/></proof>
  </goal>
  <goal name="decode&#39;vc.29" expl="integer overflow" proved="true">
  <proof prover="2"><result status="valid" time="0.880000" steps="692"/></proof>
  </goal>
  <goal name="decode&#39;vc.30" expl="integer overflow" proved="true">
  <proof prover="2"><result status="valid" time="2.189523" steps="1456"/></proof>
  </goal>
  <goal name="decode&#39;vc.31" expl="precondition" proved="true">
  <proof prover="2"><result status="valid" time="2.227092" steps="3032"/></proof>
  </goal>
  <goal name="decode&#39;vc.32" expl="precondition" proved="true">
  <proof prover="2" timelimit="10"><result status="valid" time="5.185215" steps="4691"/></proof>
  </goal>
  <goal name="decode&#39;vc.33" expl="precondition" proved="true">
  <proof prover="2" timelimit="15"><result status="valid" time="15.284007" steps="10235"/></proof>
  </goal>
  <goal name="decode&#39;vc.34" expl="integer overflow" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.470000" steps="478"/></proof>
  </goal>
  <goal name="decode&#39;vc.35" expl="assertion" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="decode&#39;vc.35.0" expl="assertion" proved="true">
   <proof prover="2" timelimit="20"><result status="valid" time="6.706771" steps="4012"/></proof>
   </goal>
   <goal name="decode&#39;vc.35.1" expl="assertion" proved="true">
   <proof prover="2" timelimit="20"><result status="valid" time="14.080933" steps="8491"/></proof>
   </goal>
   <goal name="decode&#39;vc.35.2" expl="assertion" proved="true">
   <proof prover="2"><result status="valid" time="3.546045" steps="4076"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="decode&#39;vc.36" expl="assertion" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.640000" steps="514"/></proof>
  </goal>
  <goal name="decode&#39;vc.37" expl="loop variant decrease" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="decode&#39;vc.37.0" expl="loop variant decrease" proved="true">
   <proof prover="2" timelimit="10"><result status="valid" time="0.020000" steps="81"/></proof>
   </goal>
   <goal name="decode&#39;vc.37.1" expl="loop variant decrease" proved="true">
   <proof prover="2"><result status="valid" time="0.030000" steps="81"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="decode&#39;vc.38" expl="loop invariant preservation" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.750000" steps="522"/></proof>
  </goal>
  <goal name="decode&#39;vc.39" expl="loop invariant preservation" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.010000" steps="84"/></proof>
  </goal>
  <goal name="decode&#39;vc.40" expl="loop invariant preservation" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="decode&#39;vc.40.0" expl="loop invariant preservation" proved="true">
   <proof prover="2" timelimit="15"><result status="valid" time="0.110000" steps="87"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="decode&#39;vc.41" expl="loop invariant preservation" proved="true">
  <transf name="split_vc" proved="true" >
   <goal name="decode&#39;vc.41.0" expl="loop invariant preservation" proved="true">
   <proof prover="2"><result status="valid" time="0.833224" steps="1031"/></proof>
   </goal>
   <goal name="decode&#39;vc.41.1" expl="loop invariant preservation" proved="true">
   <proof prover="2"><result status="valid" time="0.753832" steps="869"/></proof>
   </goal>
   <goal name="decode&#39;vc.41.2" expl="loop invariant preservation" proved="true">
   <proof prover="2"><result status="valid" time="1.287640" steps="1717"/></proof>
   </goal>
  </transf>
  </goal>
  <goal name="decode&#39;vc.42" expl="integer overflow" proved="true">
  <proof prover="2"><result status="valid" time="0.050000" steps="97"/></proof>
  </goal>
  <goal name="decode&#39;vc.43" expl="precondition" proved="true">
  <proof prover="2" timelimit="1"><result status="valid" time="0.020000" steps="115"/></proof>
  </goal>
  <goal name="decode&#39;vc.44" expl="postcondition" proved="true">
  <proof prover="2"><result status="valid" time="1.590000" steps="2539"/></proof>
  </goal>
 </transf>
 </goal>
 <goal name="decode_encode&#39;vc" expl="VC for decode_encode" proved="true">
 <proof prover="2"><result status="valid" time="0.090000" steps="45"/></proof>
 </goal>
</theory>
</file>
</why3session>
