It’s actually 1/(2^128). If the attacker does not know how the image will be perturbed prior to hashing then he cannot generate an image which matches with kno

It’s actually 1/(2^128). If the attacker does not know how the image will be perturbed prior to hashing then he cannot generate an image which matches with known CSAM.