P
Initializing...
§6, p. 1504 — the discrete-log circuit gives a good output with probability at least $1/480$ · Prove2Me