https://labs.ripe.net/author/maxvonhippel/a-formal-analysis-of-karns-algorithm/