DST is excellent. I use it whenever I need to implement hard-to-prove-correct algorithms and systems.

It is not as good as proving the code correct of course but it is very pragmatic and you are testing the actual code.