new definition of indistinguishability; proof without declassify