fact: Definition G1 := gx <-$ RndG; gy <-$ RndG; [p0, p1, s] <-$3 (A1 gx); b <-$ {0, 1}; gz' <-$ ( pb <- if b then p0 else p1; gz <-$ RndG ; ret (gz * pb)); b' <-$ (A2 (gy, gz', s)); ret (b ?= b').
imports: FCF RndGrpElem Encryption_PK DiffieHellman OTP