You are glossing over how an adversary can generate an image that meets the following requirements: a) hashes to the same value as known csam image A with th

You are glossing over how an adversary can generate an image that meets the following requirements: a) hashes to the same value as known csam image A with the public NeuralHash algorithm b) has a derivative (e.g. lower res thumbnail) that when processed with a _private_ perceptual hash algorithm also matches known csam image A. What is your proposal for solving b. For a, it’s possible to iteratively generate NeuralHash’s that get close and closer to the value you are attempting to equal, while that isn’t possible for step b.