proposition: Theorem group_OTP_l : forall (x : GroupElement), comp_spec eq (RndG) (r <-$ RndG; ret (groupOp x r)).
proof: Proof. eapply OTP_inf_th_sec_l; intuition. apply associativity. eapply left_inverse. eapply right_inverse. eapply left_identity. eapply RndGrpElem_spec. Qed.
imports: FCF.FCF FCF.RndNat FCF.RndGrpElem