Universally Composable Security: A Tutorial by Ran Canetti

Primary source: www.bu.edu/riscs/files/2025/08/Canetti.pdf

Verified locator: Ran Canetti, UC/EasyUC Summer School, Boston University,11–12August2025. PDFpp23–25: protocol-emulation quantifiers, quantitative formulation and ideal-service leakage; pp48–49: universal composition; pp74–76: general model and restrictions.

PDF page 25: allowed leakage is represented by information sent from an ideal functionality to the simulator. PDF page 33: the secure point-to-point example leaks the message length when uncorrupted. This is a permitted-observation specification, not a claim that a given disclosure is harmless.