Function vstd::bits::lemma_u8_pow2_no_overflow
source · pub broadcast proof fn lemma_u8_pow2_no_overflow(n: nat)Expand description
requires
0 <= n < <u8>::BITS,ensures#[trigger] pow2(n) <= <u8>::MAX,Proof that 2^n does not overflow u8 for an exponent n.