&gt; the nonces are per table entry<p>Ah, I see.<p>&gt; The output.<p>But you just said that the output was zero?<p>Perhaps I&#x27;m missing something here, you got the output as 1 from &quot;0,0,1&quot;, and you got the output as 0 from &quot;it being the third entry in the table&quot;<p>(additionally, how does it being the third entry tell you anything? This isn&#x27;t an AND gate, this is an encrypted-and-shuffled AND gate, so you might have three outputs that are 1 instead of three 0 outputs, and they might be shuffled anyhow)