Key points of correctness proof

• If S* was able to decode Yi , …,Yi (with work W), then with probability 1-(7/8)n S* can decode 3.5n Yj‘s (with work 4nW).

• By use of these 3.5n points (j,Xj), with overwhelming probability, S* can know on her own DR’s reply in S* Phase II.

n-1

1