2 ms·
> what is 1 in 0,0,1? the encrypted output? Yes, the encrypted output. > Since this salted hash must be verifiable, I must know the bcx... string, and I can b
by nullc 11y ago
> what is 1 in 0,0,1? the encrypted output?
Yes, the encrypted output.
> Since this salted hash must be verifiable, I must know the bcx... string, and I can brute force all 8 possible pairs of numbers to get the gate. Isn't this a problem?
I tell you it when I give you the table entry. You have the commitments, go ahead and tell me the rest of the gate if you think you can brute force it. (You can't-- the nonces are per table entry).
> Where did the zero come from?
From the third field in the table entry.
Edit: HN won't let me respond to you, but the fact that it's the Nth entry is irrelevant; I called out the number so you'd see if was one of the values that were committed to. Sorry for adding confusion.
- Manishearth 11y ago> the nonces are per table entry Ah, I see. > The output. But you just said that the output was zero? Perhaps I'm missing something here, you got the output as 1 from "0,0,1", and you got the output as 0 from "it being the third entry in the table" (additionally, how does it being the third entry tell you anything? This isn't an AND gate, this is an encrypted-and-shuffled AND gate, so you might have three outputs that are 1 instead of three 0 outputs, and they might be shuffled anyhow)