fact: Definition G2_5 := r <-$ {0, 1}^eta; [a, o] <-$2 A1 _ _ (RF_Encrypt) nil; [p0, p1, s_A] <-3 a; b <-$ {0, 1}; pb <- if b then p1 else p0; pad <-$ {0, 1}^ eta; c <- (r, pb xor pad); [b', o] <-$2 (A2 s_A c) _ _ (RF_Encrypt_bad r) (o, false); ret (eqb b b', snd o).
imports: FCF PRF Encryption RndInList OTP WC_PolyTime