Verified Box-Muller