Formally verified implementation of change making algorithms