The time-ordered case Clause Samples

The time-ordered case. � In some applications, like the multi-round version of the Fiat-Shamir transfor- mation, we need that the simulator extracts the messages in the right order. This can be achieved by replacing the hashlistH(x) = H(x1), . . . , H(xn) , consisting of individual hashes, by a hashchain, where subsequent hashes de- pend on previous hashes. Intuitively, this enforces to query the oracle in the given order.