<story><title>Confess your love with zero-knowledge</title><url>https://www.zkcrush.xyz/</url></story><parent_chain><item><author>garaetjjte</author><text>Doesn&amp;#x27;t work, because you can reasonably brute-force possible gifts.</text></item><item><author>Liron</author><text>Last year my wife and I suspected we might have gotten each other the same Christmas gift, but didn’t want to spoil the surprise in case we didn’t. So we compared SHA256 hashes... and sure enough they both came out cb17007d (theragun)</text></item></parent_chain><comment><author>lights0123</author><text>You could reveal the hash letter-by-letter and stop as soon as a letter differs so there&amp;#x27;s more possibilities.</text></comment>
<story><title>Confess your love with zero-knowledge</title><url>https://www.zkcrush.xyz/</url></story><parent_chain><item><author>garaetjjte</author><text>Doesn&amp;#x27;t work, because you can reasonably brute-force possible gifts.</text></item><item><author>Liron</author><text>Last year my wife and I suspected we might have gotten each other the same Christmas gift, but didn’t want to spoil the surprise in case we didn’t. So we compared SHA256 hashes... and sure enough they both came out cb17007d (theragun)</text></item></parent_chain><comment><author>10000truths</author><text>Sure, but the example is contrived, as it serves to illustrate the point in an easily digestible (heh) way. In real world applications, both the possible messages and the possible hashes would be way too large to brute force.</text></comment>