Specification of the circuit.
We use an if. An alternative is to use logxor.
Function:
(defun boolean-xor-spec (x y z prime) (declare (xargs :guard (and (primep prime) (pfield::fep x prime) (pfield::fep y prime) (pfield::fep z prime)))) (declare (ignore prime)) (declare (xargs :guard (and (bitp x) (bitp y)))) (let ((__function__ 'boolean-xor-spec)) (declare (ignorable __function__)) (equal z (if (= x y) 0 1))))
Theorem:
(defthm booleanp-of-boolean-xor-spec (b* ((yes/no (boolean-xor-spec x y z prime))) (booleanp yes/no)) :rule-classes :rewrite)
Theorem:
(defthm bitp-z-when-boolean-xor-spec (implies (and (boolean-xor-spec x y z prime) (bitp x) (bitp y)) (bitp z)))