Function vstd::arithmetic::mul::lemma_mul_ordering
source · pub broadcast proof fn lemma_mul_ordering(x: int, y: int)
Expand description
requires
x != 0,
y != 0,
0 <= x * y,
ensures#[trigger] (x * y) >= x && x * y >= y,
Proof that, since the product of the two integers x
and y
is
nonnegative, that product is greater than or equal to each of x
and y