proposition: Theorem PedersenHiding_G2_equiv : Pr[PedersenHiding_G1] == Pr[PedersenHiding_G2].
proof: Proof. unfold PedersenHiding_G1, PedersenHiding_G2. do 3 (inline_first; comp_skip; comp_simp). comp_skip. symmetry. eapply comp_spec_eq_impl_eq. eapply group_OTP_l. Qed.
imports: FCF GroupTheory OTP RndNat RndGrpElem