[jemfinch]

But this can be done without trusting anyone at all (e.g., http://users.cis.fiu.edu/~carbunar/teaching/cis5374.F.2014/s...; cf. pages 90-91 of Applied Cryptography).