[0.  Summary.]

1. On page 3, the garbled circuit summary says that "The garbled gate consists of the four resulting ciphertexts, in a random order." Why do the resulting ciphertexts need to be arranged in random order? Explain what would leak if they weren't.

2. Garbling schemes like Yao's scheme are "one-time" schemes. Namely, they are secure if an attacker having a garbled circuit receives at most one encoded input for that garbled circuit. What breaks if an attacker receives more than one input? In other words, consider that Giny and Evan want to use garbled circuits to compute the bit-wise AND of two 5-bit numbers. Give an example of two such numbers for which, if Giny gives the encodings to Evan, Evan can compute the encoding of any other 5-bit number.