# Tag Info

Actually, if you define the $H_i$ functions properly, it can be done. I'll make the simplifying assumption that we can treat the $H_i$ and $F$ functions as Oracles (that is, you're not allowed to look inside their implementation); I believe that it's still possible without that assumption (but the solution may be more complex). For our primitives, we'll ...