David Lester Paul Gowland Using PVS to validate the algorithms of an exact arithmetic. 203-218 2003 291 Theor. Comput. Sci. 2 db/journals/tcs/tcs291.html#LesterG03