Definition d_i := minusw s'_i y_i.Definition r_i := minusw x_i_in_Z_ y_i.(* only needed after the loop *)

Definition r'''0 := ltw r''0 M_in_Z_ r''0 (minusw r''0 M_in_Z_).Definition g' := r'''0.

Lemma r'_i_eq : _Z r'_i = (h mod M * 2 ^ w + l) / 2 ^ p * 2 ^ p mod M + (h mod M * 2 ^ w + l) mod 2 ^ p.