author: martin hirt

... BP): On input the public parameters pp, the faking key fk, a ciphertext ctor and description of a branching program BP 1. 2. If BP(a) # 0, then output sks – Keygen(fk, BP). Otherwise, parse ciphertext ctor as ctor = (a, bo, {{!}},esq ...