Prove Admitted Lemmas in Util.v