'prove' first induction case [msg = []] with the 3 lemmas. change xor lemma to have ip/IP and generalize it to xpad