Microsoft uses formal verification of their encryption code in production using SymCrypt.