fact: Definition PedersenHiding_G1 := a <-$ [ 0 .. order); [v1, v2, s_A] <-$3 A1 (g^a); b <-$ {0,1}; v <- (if b then v1 else v2); z <-$ (x <-$ RndGrpElem; ret (g ^ v * x)); b' <-$ A2 s_A z; ret eqb b b'.
imports: FCF GroupTheory OTP RndNat RndGrpElem