Function vstd::arithmetic::div_mod::lemma_mod_is_zero
source · pub broadcast proof fn lemma_mod_is_zero(x: nat, m: nat)
Expand description
requires
x > 0 && m > 0,
#[trigger] (x % m) == 0,
ensuresx >= m,
Proof that if x % m
is zero and x
is positive, then x >= m
.