asciilifeform: i do sometimes wonder what goes on in the heads, 'hey i hate them nao, mebbe prb is where it's at', wtf

asciilifeform: iirc shinohai also started prb approx 6mo after his 'what am i doing here' monologue

asciilifeform: ( i.e. transformator for 256b K that produces K1,...Kn that go to equiv. end states )

asciilifeform: at least until i actually do it and it spews forth the pill eqn.

asciilifeform: the fundamental problem with 'i'ma use turing-complete automaton as hash!' is that ~specifically~ the aspect that makes it seem appealing to begin with, is the very same thing that kills you, it is impossible to prove non-cyclicity

asciilifeform: i had an automata thing, but found that i could not in good conscience play it for the prize, i never found any approach to a proof that it dun have ( as mircea_popescu called ) 'kek state'

asciilifeform: mircea_popescu: the bigger saddity, is that i dun have anything to offer to plug-in replace 'serpent', nao just as in '16 when mircea_popescu was offering prizes

asciilifeform: loox like finding answer might add up to costing some penies ( or not, lessee, if dulap dun suffice, i'ma lease some cycles on lulazon cluster )

asciilifeform: i still dun know what the actual keyspace is, just yet

asciilifeform: hm trinque is Mocky currently in the deedbot rotation ? i missed his last 2 posts apparently

asciilifeform: btw if it aint obvious -- the denser the horiz. path across the pic, the ~easier~ it is to find alt-solutions to that line of the expansion (i.e. rearrangements of the input key that yield the same mod-2 summation when multiplied with that row of the matrix )

asciilifeform: it's funny, if only to me -- if author wanted to make the keyspace == 2**256, all he would have had to do is to drop a copy of the 256bit key into the expansion. but i can already picture the fatlogic, 'oh noez, that wouldn't do, will leak key via plaintext cuz not whitened'

asciilifeform: i'm reminded of the chessboards they used to print in sov newspapers. after a good rain.

asciilifeform: these , in a hash output, is.. i lack the words

asciilifeform: i expect the gaussation itself could take coupla wks on dulap, once the req'd pieces are cut and glued

asciilifeform: will note, tho, re fg timeouts -- the most likely waiting-on-fg scenario is starvation, rather than outright hangage , thing shits out 7kB/s per spec, 8 on a good day; i expect it will be the limiting reactant re how many rsa msgs / sec can be produced

asciilifeform: but i'ma stop picking on diana_coman's item for nao

asciilifeform: http://ossasepia.com/2018/10/31/smg-comms-chapter-5-rsa-with-oaep-from-ada/#selection-155.1206-155.2305 << example of where i'dve used an ada record

asciilifeform: fwiw i've witnessed the death of usb ports per se.

asciilifeform: granted i've yet to witness a dead fg. but i dun have a written guarantee from the gods, that they can never die, no

asciilifeform: diana_coman: metoo, i had to breathe ada for yrs before working all the c sad out of my follicles

asciilifeform: but i dun recall from my head; it is in the logs somewhere

asciilifeform: diana_coman: aha, i use same method

asciilifeform: it is one of the reasons why i section my routines into staticlinkable libs , rather than 'take this and cut&paste'

asciilifeform: there is no particular reason why ~erry~ proggy has to have the same pragma fascism as ffa ( and in fact i've written several that cannot function under that set of constraints, e.g. the mmap thing requires System.Address )

asciilifeform: implicit conditionals aint evil per se , tho ; i banned them in ffa specifically as they get in the way of constanttimeism, is all ☟︎

asciilifeform: ( the only other operation i know to do this, is array concatenation ; hence my earlier suspicion )

asciilifeform: the q, i mean.

asciilifeform: diana_coman: the caveat re my method, is that i do not presently know how to ~portably~ 'lock' the thing ( so >1 process dun eat from it )

asciilifeform: if somehow FG were to catch on with the http://btcbase.org/log/2018-10-26#1866428 crowd, the situation will not differ so much from the current : coupla 100 people will have the genuine article, and 9,999,999 sad folx will have physically-similar item made in hong kong to washington's specs. and i couldn't do a thing about it. ☝︎

asciilifeform: currently i'm not even certain that makes sense to ~sell~ a crypto iron; possibly a truly-serious user ~must~ make 'his own' , out of standardized, exhaustively-testable, and -- most importantly -- mix&match-able, components, from a design he has read & understood.

asciilifeform: for instance, i have here 2 FG units i flew ~back~ from pizarro, they had been pawed by randos when ben_vulpes had his customs debacle. in so far as i can tell , they have orig firmware still, and by erry possible test they are virginal, but even i cannot say whether they're 'still FG' or not !

asciilifeform: so i have nfi how one'd make it a +ev biznis-proposition.

asciilifeform: naturally this aint exactly commercially-hotstuff, it suffers from same problem as my other items, e.g. FG, namely that there's maybe 100 thinking people alive total, i.e. folx who could reliably distinguish the real thing from 9000x-cheaper imitation liquishit.

asciilifeform: i suspect it's the closest thing physically possible to saw-proof sram 'safe'.

asciilifeform: ( and no, you can't buy remanence-free sram, afaik, off-the-shelf, i devised it and it is published only in the l0gz.)

asciilifeform: i.e., ic that when paired with another of its kind, and rng, saves internally the pad; but won't simply disgorge it unless in a synchronous link with the item it was synced with, as described in the algo.

asciilifeform: lessee if mircea_popescu or diana_coman beat me to the pill, i'ma not spoil the exact algo just yet.

asciilifeform: but funnily enuff that was the only place i ever saw it, prior to mircea_popescu's mention

asciilifeform: ( for all i know, he devised it )

asciilifeform: we will also know if some appear more times than others, i.e. producing a nonflat keyspace.

asciilifeform: diana_coman: later tonight i'ma post the version with reduction

asciilifeform: diana_coman: is wai i posted

asciilifeform: mircea_popescu, diana_coman ^ still needs the elementary reduction massage, but i went ahead an' posted, in case somebody wants.

asciilifeform: i gotta wonder what else they've got; maybe also a lunapark where only the employees get to ride

asciilifeform: ( i'm not actually certain why we do this test prior to bastardism, there's 0 point running any test on a block that fails do-we-have-its-father litmus . really this is leftover logic from removal of orphanage )

asciilifeform: i.e. it's not simply an alt

asciilifeform: same observation arguably can be applied to errything else tho, so i'm not entirely sure it's a useful one.

asciilifeform: rsa & c-s (the latter, really a narrowed elgamal) are the only 2 oasis i know to exist in that desert.

asciilifeform: ( i.e. http://btcbase.org/log/2018-10-30#1867703 ) ☝︎

asciilifeform: whereas if you don't throw them out, you have a reversible thing that is just multiplication, and i can gcd(p1,p2) == K.

asciilifeform: sorta why it did not make sense to asciilifeform that people sat and 'i'ma make a hash', 'i'ma make a cipher', a good x is exactly a good y

asciilifeform: it's the reason for asciilifeform's lulzsubmission to mircea_popescu's 'block contest'. it wasn't even joak, it was 'rsa is the only tool in that box that i have any reason to think actually worx'

asciilifeform: in '16 i burned coupla months on the q of 'can haz', mainly on np-hard problems / turing-complete cellular automata, in place of sboxation. but got stuck on the 'guaranteed hard instance' boojum.

asciilifeform: reasonable cipher requires element that is at least a ~conjectured~ trap door (i.e. 'entry is a buck but exit is two'), e.g. exponentiation-with-primes

asciilifeform: the closest thing i can think of to a working variant of mircea_popescu's device, is where you keep the carries, and use primes... and we know it as.. rsa ☟︎

asciilifeform: perchance i can provoke mircea_popescu into writing a proggy that deciphers ?

asciilifeform: i gotta admit that i still dun grasp how to decipher unambiguously into 1 single orig plaintext