Therefore, if we replace the actual hash function by a truly generated random key K that's independent of everything else, by the Hash Diffie-Hellman assumption, the attacker can't distinguish these two games. 