Admitted.
(* This is to make sure do_compute_expr (invoked by load_tac and others), which calls hnf on the expression it's computing, does not unfold field_address. TODO floyd: Ideally, we'd have "Global Opaque field_address field_address0" in the library, but some proofs want to unfold field_address (they shouldn't, though). *)
Opaque field_address.

Lemma body_aes_encrypt: semax_body Vprog Gprog f_mbedtls_aes_encrypt encryption_spec_ll.