proposition: Lemma waddmsb_NToWord {sz} : forall n, (n < Npow2 sz)%N -> waddmsb (NToWord sz n) false = (NToWord (S sz) n).
proof: Proof. intros. apply wordToN_inj. rewrite wordToN_waddmsb; ring_simplify. rewrite !wordToN_NToWord_idempotent; simpl; lia. Qed.
imports: Fiat.Common.Coq__8_4__8_5__Compat List Bedrock.Word Coq.ZArith.ZArith Coq.micromega.Psatz NArith NArithRing ZArith ZArithRing Program Coq.micromega.Psatz AlignedByteString Permutation