anchor.diff:                    let (sh_server_version,sh_random,sh_session_id,sh_cipher_suite,sh_compression_method,sh_neg_extensions) = shello
                     // Sanity checks on the received message; they are security relevant. 
                     // Check that the server agreed version is between maxVer and minVer.
  -                  if not (geqPV sh_server_version state.poptions.minVer 
  -                       && geqPV state.poptions.maxVer sh_server_version) 
  +                  if  (geqPV sh_server_version state.poptions.minVer 
  +                       && geqPV state.poptions.maxVer sh_server_version) = false
                     then InError(AD_illegal_parameter, perror __SOURCE_FILE__ __LINE__ "Protocol version negotiation",state)
                     else
                     // Check that the negotiated ciphersuite is in the proposed list.
                     // Note: if resuming a session, we still have to check that this ciphersuite is the expected one!
  -                  if not (Bytes.exists (fun x -> x = sh_cipher_suite) state.poptions.ciphersuites) 
  +                  if  (Bytes.exists (fun x -> x = sh_cipher_suite) state.poptions.ciphersuites) = false
                     then InError(AD_illegal_parameter, perror __SOURCE_FILE__ __LINE__ "Ciphersuite negotiation",state)
                     else
                     // Check that the compression method is in the proposed list.
  -                  if not (Bytes.exists (fun x -> x = sh_compression_method) state.poptions.compressions) 
  +                  if (Bytes.exists (fun x -> x = sh_compression_method) state.poptions.compressions) = false
                     then InError(AD_illegal_parameter, perror __SOURCE_FILE__ __LINE__ "Compression method negotiation",state)
                     else
                     // Parse extensions
  
positive.code:                     else
                          // RFC Sec 7.4.1.4: with no safe renegotiation, we never send extensions; if the server sent any extension
                          // we MUST abort the handshake with unsupported_extension fatal alter (handled by the dispatcher)
                          if not (equalBytes sh_neg_extensions [||])
                          then Error(AD_unsupported_extension, perror __SOURCE_FILE__ __LINE__ "The server gave an unknown extension")
                          else let unitVal = () in correct (unitVal)
                    match safe_reneg_result with
  
negative.code:     (* We expect to find exactly one extension *)
      match listLength extList with
      | 0 -> Error(AD_handshake_failure, perror __SOURCE_FILE__ __LINE__ "Not enough extensions given")
      | x when x <> 1 -> Error(AD_handshake_failure, perror __SOURCE_FILE__ __LINE__ "Too many extensions given")
      | _ ->
          let (extType,payload) = listHead extList in
          match extType with
  