Definition 2.1(GenericPRF-ODHassumption)

While we show that even the strongest variantis achievable in the random oracle model under the strong Diffie–Hellman assumption, we provide anegative result showing that it is implausible to instantiate even the weaker variants in the standardmodel via algebraic black-box reductions to common cryptographic problems.