pseudorandom-function oracle-Diffie-Hellman (PRF-ODH) assumption
PRF-ODH:ThePRF-ODHassumptionbasicallysaysthatthefunctionvaluePRF(guv,x∗)\color{red}{PRF(g^{uv},x^*)}PRF(guv,x∗)foraDHkeyguv\color{red}{g^{uv}}guvlooksrandom,evenifgivengu\color{red}{g^u}guandgv\color{