P
Initializing...
Sections b and d, pp.5–9 — if a pure-state commitment conceals the bit, Alice opens $0$ honestly and $1$ with probability $\ge$ honest $-\,4\sqrt\varepsilon$ · Prove2Me