The symbolic proofs of the protocol are independent of the implementation. The portions of the implementation that are formally verified are written in F* and

The symbolic proofs of the protocol are independent of the implementation. The portions of the implementation that are formally verified are written in F* and Coq, and emitted as machine-generated C.