Function vstd::arithmetic::div_mod::lemma_add_mod_noop
source · pub broadcast proof fn lemma_add_mod_noop(x: int, y: int, m: int)
Expand description
requires
0 < m,
ensures((x % m) + (y % m)) % m == (x + y) % m,
Proof that modulo distributes over addition, provided you do an
extra modulo after adding the remainders. Specifically,
((x % m) + (y % m)) % m == (x + y) % m
.