Ashlar builds an AO hash from chained field squarings, trying to out-Poseidon Poseidon and begging for attacks.
2 comments
Glad someone finally wrote this down, and good luck with the attacks.
The 1 bit per constraint ceiling is the part that made me blink, not the 191 vs 243 table. If that accounting survives attacks, it makes the whole “squaring beats power maps” pitch much less hand-wavy.