Verifying while loops with invariant relations. (1st January 2014)