Important!<\/strong><\/p>Download and extract the\u00a0bit_xor.zip<\/a> program.<\/div><\/p>\n In this simple example we consider a 1-bit secret h. The protocol produces a random bit r with a given probability p of being 1, and outputs the result of the exclusive disjunction operation between h and r. The attacker knows p and can observe the output, but not r or h. Basically he knows p and whether h = r or not. If p = 0:5 the attacker cannot infer any information about h, thus we have noninterference, i.e. the leakage is 0 bits. If p = 0 or p = 1 then the attacker can determine precisely the value of h, and thus the leakage is 1 bit.<\/p>\n QUAIL can quantify the leakage with arbitrary precision for all p between 0 and\u0014 1. The results are shown in the graph below.<\/p>\n
![\"\"](\"https:\/\/project.inria.fr\/quail\/files\/2012\/12\/bit_xor.png\" "\\"bit_xor\\"")
<\/a><\/p>","protected":false},"excerpt":{"rendered":"