fact: Definition G4 := [a, o] <-$2 A1 _ _ (RF_Encrypt) nil; [p0, p1, s_A] <-3 a; b <-$ {0, 1}; pb <- if b then p1 else p0; r <-$ {0, 1}^eta; pad <-$ {0, 1}^eta; c <- (r, pad); [b', o] <-$2 (A2 s_A c) _ _ RF_Encrypt o; ret (eqb b b').
imports: FCF PRF Encryption RndInList OTP WC_PolyTime