Diffie-Hellman assumption, we know that even though the attacker got to see G, G to the a and G to the b, we know that the output of the hash of G to the b, G to the ab is indistinguishable from random. 