The Binary Decision Diagram: Formal Verification Of A Reference Implementation