angles, $\phi=(\phi_i)_{1 \leq i \leq 3N(3c+1)}$ with $\phi_i \in A = \{0, \pi/4, \cdots, 7\pi/4\}$, consistent with $\bbbm_{\textrm{Comp}}$. We define $\phi_i'(\phi_i,\mathbf{s})$ to be the measurement angle in MBQC, when corrections due to previous measurement outcomes $\mathbf{s}$ are taken into account (the function depends on the specific base-graph and its flow, see e.g. [@bfk]). We also set $\phi'_i = 0$ for all the trap and dummy qubits. – The Client chooses a measurement order on the dotted base-graph $D(G)$ that is consistent with the flow of the computation (this is known to the Server). The measurements within each set $P_v$ and $A_e$ of $DT(G)$ are ordered randomly.\
– $3N (3c+1)$ random variables $\theta_i$ with values taken uniformly at random from $A$.\
– $3N (3c+1)$ random variables $r_i$ and $|D|$ random variable $d_i$ with values taken uniformly at random from $\{0,1\}$.\
– A fixed function $C(i, \phi_i, \theta_i, r_i, \mathbf{s}) = \phi_i'(\phi_i,\mathbf{s}) +\theta_i + r_i \pi$ that for each non-output qubit $i$ computes the angle of the measurement of qubit $i$ to be sent to the Server.

(Continues on next page)

$\bullet$ **Initial Step**\
– **Client’s move:** Client sets all the value in $\mathbf{s}$ to be $0$ and prepares the input qubits:

