An optimization for garbled circuits in which XOR gates cost nothing: they contribute nothing to the size of the garbled circuit, and they involve no cryptographic operations for garbling/evaluation. Introduced in KS08.