I've been reading the proof in these slides, the last page, and the author is using the lemma:


I understand on the intuitive level that it's a consequence of the assumed perfect secrecy, but can someone provide a proof to the aforementioned?

  • $\begingroup$ The ciphertext $c$ is independent of the message rv $M$, so the conditionals are the same for either message. $\endgroup$ – pg1989 Oct 11 '16 at 19:19

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.