[0. Summary.]
1. In the construction in Fig. 2 of Pretzel, one could have done the dot product inside the garbled circuits as well and not use the additive homomorphism. Why did the authors choose to do the dot product outside the garbled circuits?