Functionality Decomposition by Compositional Correstness Preserving Transformation. - Ed Brinksma; Rom Langerak; Peter Broekroelofs (CAV, 1993)