> I'm also exploring possibilities for making the chunking provably secure. Seems like that’s possible[1] to do in a fairly straightforward manner, the questio

> I'm also exploring possibilities for making the chunking provably secure. Seems like that’s possible[1] to do in a fairly straightforward manner, the question is if you can do this without computing a PRF for each byte. [1] Obviously you’re always going to leak the total data size and the approximate size of new data per each transfer.