proposition: Theorem PedersenHiding_G1_equiv : Pr[PedersenHiding_G0] == Pr[PedersenHiding_G1].
proof: Proof. unfold PedersenHiding_G0, PedersenHiding_G1. do 3 (inline_first; comp_skip; comp_simp). comp_inline_r. comp_skip. symmetry. eapply comp_spec_eq_impl_eq. apply group_OTP_exp. comp_simp. intuition. Qed.
imports: FCF GroupTheory OTP RndNat RndGrpElem