> Once this is filled a bit, he can use that with some heuristics to estimate the data. how many inputs do you need before the heuristics start letting you gue

> Once this is filled a bit, he can use that with some heuristics to estimate the data. how many inputs do you need before the heuristics start letting you guess than a function with 128 bits of input is a 64 bit multiply? and if the input is 8192 bits? i feel like you're reporting some theoretical ("needs 2^1024 ciphertexts!") attack as though it is a practical concern.