Function vstd::bits::lemma_u8_pow2_no_overflow
source · pub broadcast proof fn lemma_u8_pow2_no_overflow(n: nat)
Expand description
requires
0 <= n < <u8>::BITS,
ensures#[trigger] pow2(n) <= <u8>::MAX,
Proof that 2^n does not overflow u8 for an exponent n.