# Security in case of Malicious and Augmented Semi-Honest Adversaries

On page 29 of Book Efficient Secure Two-Party Protocols by Y. Lindell and C. Hazay, there's this proposition:

Let π be a protocol that securely computes a functionality f in the presence of malicious adversaries. Then π securely computes f in the presence of augmented semi-honest adversaries.

There's a proof following this proposition. In the proof, they say that the distribution over messages will be identical since the real adversary will follow the protocol exactly. But since an augmented semi honest adversary might change the input, won't the distribution over messages change as well? Also, why can't a similar proof be drawn for security in case of semi-honest adversaries?

Moreover, is the definition of security in case of augmented semi-honest adversaries analogous to that in case of malicious adversaries? In the book, I was unable to find a formal definition of security for augmented semi honest adversaries.

P.S: This is the proof:

Let π be a protocol that securely computes f in the presence of malicious adversaries. Let A be an augmented semi-honest real adversary and let S be the simulator for A that is guaranteed to exist by the security of π (for every malicious A there exists such an S, and in particular for an augmented semi-honest A). We construct a simulator S′ for the augmented semi-honest setting, by simply having S′ run S. However, in order for this to work, we have to show that S′ can do everything that S can do. In the ma- licious ideal model, S can choose whatever input it wishes for the corrupted party; since S′ is augmented semi-honest, it too can modify the input. In addition, S can cause the honest party to output abort. However, S′ cannot do this. Nevertheless, this is not a problem because when S is the simulator for an augmented semi-honest A it can cause the honest party to output abort with at most negligible probability. In order to see this, note that when two honest parties run the protocol, neither outputs abort with non-negligible probability. Thus, when an honest party runs together with an augmented semi-honest adversary, it too outputs abort with at most negligible probabil- ity. This is due to the fact that the distribution over the messages it receives in both cases is identical (because a semi-honest real adversary follows the protocol instructions just like an honest party). This implies that the simu- lator for the malicious case, when applied to an augmented semi-honest real adversary, causes an abort with at most negligible probability. Thus, the aug- mented semi-honest simulator can run the simulator for the malicious case, as required.

• Since not everyone has the book, it would be helpful if you described what an augmented semi-honest adversary is. Commented Sep 1, 2017 at 12:47
• An augmented semi-honest adversary is one which can change its input before the protocol execution. Once the protocol starts, it follows the protocol exactly, but tries to gain useful insight from the messages it receives. Commented Sep 1, 2017 at 12:51