A Mechanically Checked Proof of Correctness of the AMD K5 Floating Point Square Root Microcode.

David M. Russinoff A Mechanically Checked Proof of Correctness of the AMD K5 Floating Point Square Root Microcode. 75-125 1999 14 Formal Methods in System Design 1 db/journals/fmsd/fmsd14.html#Russinoff99