Refreshing against a fixed left-side tampered seed #
The transcript records a left-only tampered seed, the original right input to the initial-seed map, the tampered refresh, and the honest first output. The original left and right states are retained in the factored law. The refresh law additionally retains the full left state and outputs the actual honest refresh, without replacing either source by fresh randomness.
Original tag and left leak, then right input and tampered refresh, then honest first output.
Equations
Instances For
Once the left leak is fixed, both the right input and tampered refresh are right messages.
Equations
- Algebraic.Cutwidth.Extractor.fixedTamperingRightMessage q y' R zm b = (q zm.1 b, R (y' zm.1 b) zm.2)
Instances For
Once the right input is fixed, the honest first output is a left message.
Equations
- Algebraic.Cutwidth.Extractor.fixedTamperingHonestMessage x initialSeed W t a = W (x t.1.1 a) (initialSeed t.2.1)
Instances For
The actual transcript computed from the original pair of states.
Equations
- One or more equations did not get rendered due to their size.
Instances For
Exact transcript weights after the left, right, and final left observations.
Equations
- One or more equations did not get rendered due to their size.
Instances For
The normalized original left-state kernel after all observations.
Equations
- One or more equations did not get rendered due to their size.
Instances For
The normalized original right-state kernel after its observed input and tampered refresh.
Equations
- One or more equations did not get rendered due to their size.
Instances For
The actual honest refresh, retaining the full transcript and original left state.
Equations
- One or more equations did not get rendered due to their size.