I have a clarification that may help with Question 6 on the midterm. As someone else pointed out to me yesterday, E' is not in general decryptable, because the decryptor may not know the random coins used by E_pk (remember that in general E_pk might be a randomized algorithm).

To repair this, you can pick one of the following interpretations:

Under the philosophy that if I write an ambiguous question, you ought to get the benefit of the doubt in interpreting it in a reasonable way, you can feel free to choose either one of those two options and answer the question with that modification.

If you have any further questions, please don't hesitate to ask us.