Hi, In case anyone wants to take a look, Ran Canetti has a 63-page paper on secure composition of protocols up at eprint.iacr.org . I haven't read through it yet, but it may be of interest. http://eprint.iacr.org/2000/067/ -David