Equivalence Checking with Formality