A formal spec is the next priority. We released the implementation first as the protocol is novel and we invite direct scrutiny of the work.
The path selection is secret, not public. It is determined by `hash(key, state, chunk)`. An attacker lacks the secret `key` and internal CVM `state` and cannot compute the path.
The key expansion and path collision mechanisms are as follows:
1. A round's key is derived from the master key, the CVM's state, and the unique nonce of the Labyrinth node being processed.
2. The CVM state ratchets forward after every block, making path collision negligible.
The path selection is secret, not public. It is determined by `hash(key, state, chunk)`. An attacker lacks the secret `key` and internal CVM `state` and cannot compute the path.
The key expansion and path collision mechanisms are as follows: 1. A round's key is derived from the master key, the CVM's state, and the unique nonce of the Labyrinth node being processed. 2. The CVM state ratchets forward after every block, making path collision negligible.