Skip to main content
1 of 2
Bulat
  • 2k
  • 1
  • 11
  • 17

I think your error is that you expect that for OWF each and any f(x) computation should be hard to reverse. But it seems incorrect, f.e. modular squaring is easily reversible for x=0.

By using g(x) = x - f(x) you will have a pair of functions that are hard to revert, but their sum is identity function.

Bulat
  • 2k
  • 1
  • 11
  • 17