Proving the Correctness of Pipelined Micro−Architectures - Kroening, D; Paul, W; Mueller, S (VDE Verlag, 2000)