🎲 Generate s
Oblivious Transfer for Q
Compute Q⊕s
Show/Hide where r points to *