signal & secrecy · metaphor 67 of 100

Life runs on one-way functions.

A reputation takes a decade to build and a sentence to spend. Trust, secrets, innocence: easy in one direction, computationally hopeless in the other. Cryptography runs on functions like that — and so does life.

Multiplying two large primes is grade-school work: line up the digits, carry the ones. Recovering those primes from their product would outlast the sun, at the sizes cryptographers actually use. The answer exists; the factors are sitting right there inside the number. What doesn't exist is anyone rich enough in time to dig them out. Cryptographers spent decades learning to build such asymmetries on purpose, because a lock is exactly this: cheap to close, expensive to open.

But nobody had to build the human versions. Saying the cruel thing, breaking the confidence, taking the first bribe — each is a multiplication: one cheap operation, and the result is public, entangled, composite. The factoring is called the rest of your life.

a · the asymmetry bench multiply two primes, then try to take it back

draw two random primes of —

choose a size to draw p and q

forward · multiply

—

the closing of the lock

backward · factor by trial division

—

the opening of the lock

your machine's own data · time vs. size ● multiply ● factor (measured) ╌ factor (extrapolated)

Factor a few products of different sizes and the chart plots what your own machine measured — then extends the trend, with the caveats it deserves.

honest computation: the factoring is real trial division running live in this page — divide by 2, then every odd number, counting every attempt. Multiply timing is averaged over 1,000,000 runs because a single multiplication is finer than the browser's clock. Sizes stop at 8-digit primes only because beyond that the product no longer fits JavaScript's exact integers — the wall itself keeps going.

Locks are asymmetries

"Hard to reverse" is a claim about resources, not existence.

A one-way function is easy to compute and infeasible to invert: given p and q, anyone gets N = p·q in microseconds; given only N, the best known road back is a search that grows explosively with the number's size. The claim is not that the inverse is undefined, or mysterious, or lost. The factors are fully determined — every digit of the undoing already exists. The claim is about price: the work is real, enumerable, and unpayable. Diffie and Hellman's 1976 insight was that you can do commerce across this asymmetry — publish the product, keep the factors — and the gap between cheap-forward and dear-backward becomes a lock any stranger can close but only you can open.

That is the precise shape of the sentence you cannot unsay. The apology does not fail because the undoing doesn't exist; a sequence of acts that would restore the prior state may well exist. It fails because finding and executing that sequence costs incomparably more than the act did. Saying was a multiplication. Unsaying is a factoring problem, and everyone who heard you is another digit.

b · the preimage game forward is a keystroke; backward is a career

forward · anything → digest

instant, every time, any input

backward · find any input whose digest starts with —

target prefix ??

difficulty

attempts 0

the toy hash, fully disclosed: h = fnv1a32(text) then avalanche-mixed h ^= h≫16; h *= 0x85ebca6b; h ^= h≫13; h *= 0xc2b2ae35; h ^= h≫16, printed as 8 hex characters. A real avalanche hash, honestly computed — but 32 bits and not cryptographic; real digests are 256 bits, which is this game at difficulty 64. Each added hex character multiplies the expected search ×16 — four doublings. The fence is exponential; you are the one climbing it.

What to try

The quitting is the theorem.

Climb the prime menu. Draw 2-digit primes; multiply; factor. Now 4. Now 6. Now 8, and watch the divisions counter spin. Somewhere on that ladder you will decide you've seen enough — that decision is the mathematics. An attacker facing a 617-digit product quits the same way, only sooner per digit.
Win the preimage game at 2 characters — a few hundred expected guesses; the auto-miner does it before the button rebounds. Then slide to 5 and try by hand for one honest minute. Feel the difference between "hard" and ×16 per character, compounding.
Run the reputation vignette twice. Build the trust meter to its ceiling, betray once, rebuild. Note where it converges the second time — and what each "reliable year" is worth now.
Let a secret age three days in the ledger, then price the un-telling. Count how many of the edges you couldn't even see.

c · the life ledger three human one-way functions

0trust · gold line = current ceiling · grey line = the old one100

hand-set model, fully disclosed: each reliable year adds 0.15 × (ceiling − trust); a betrayal multiplies trust by 0.15 and the ceiling by 0.72. The constants are invented; the shape is the claim: rebuilding converges, and it converges lower. The meter remembers the path taken — the same asymmetric memory as hysteresis.

You hold a secret. It is, for now, a prime — whole, private, yours. Telling is the multiplication.

disclosed model: each day, every knower independently tells 1 new person with probability .40 and a 2nd with probability .12. blue = tellings you witnessed; violet = edges you cannot see. Un-telling means reaching every knower before they tell again, along edges you don't know exist. Deletion is factoring.

Some one-way functions take no accomplice and leave no witness. Knowledge is one: seeing has no inverse operation. Below is a small, harmless fact you do not currently know. The forward button works. Check the backward one before you press anything.

The sawed-in-half box has held two people since before the curtain rose; the second pair of shoes was never attached to anyone.

The same door, larger: the affair confessed to, the diagnosis received, the backstage of an institution you once revered. Choices work this way too — every alternative you didn't choose has stopped being computable. Innocence is not a virtue; it's a preimage, and it doesn't survive evaluation.

The direction of every door

Audit your day by its asymmetries.

Cheap-forward / dear-backward is a working taxonomy of consequence. Most of what you'll do today is roughly symmetric — reschedule it, repaint it, apologize and it's genuinely gone. But scattered through the day are the multiplications: the email sent to the wrong list, the guarantee signed for a friend's loan, the first lie told to a partner — cheap precisely because their cost is loaded onto the inverse. The first lie is the purest case: it doesn't just misinform, it mints a composite — every later conversation must remain consistent with it, so the factoring problem grows while you sleep.

Size and asymmetry are different axes. The audit question is: if this goes wrong, is the undo a refund or a search? Symmetric mistakes deserve speed; asymmetric ones deserve everything you know about waiting. The number's digits are the act's publicity: a cruel thing said to one person is a small composite; said in front of the family, at the wedding, on the record — each witness is another digit.

Living among one-way doors

Disciplines, and the one shortcut mathematics doesn't have.

The disciplines follow from the shape. Put waiting periods in front of irreversible sends — the overnight draft folder is a cooling ritual for multiplications. Treat every secret you tell as a product already on the market: priced, in circulation, factorable by anyone patient enough — the propagation tree starts at one telling, not at some later breach. And keep the two ledgers separate: spend freely from the reversible one, and make the irreversible one walk past a second signature.

Then there is the mercy angle. Since undoing is unpayable, every durable society has invented ways to stop demanding it: the pardon, the statute of limitations, the sealed record, the ordinary kindness of forgetting. These do not factor the number — the act still happened — they simply retire the debt by decree. Institutional grace is the only known shortcut to the factoring problem of a human life, and it runs on a decision that the search may end. Forgiveness, seen through this lens, is the agreement to stop billing for the inverse.

The mapping

Mathematics ↔ life.

Mathematics	Life
multiply p·q	The act — the sentence said, the trust broken, the secret told. One cheap operation.
factor N	The undoing nobody can afford: fully determined, entirely real, priced beyond any budget you have.
digits of N	How public and entangled the act became — every witness, every retelling, another digit on the search.
preimage search	Trying to find the words that unsay: guess after guess into an exponential space, hoping to match a state that once was.
decayed rebuild	Reputation's asymmetric arithmetic — after betrayal each reliable year buys less, and the meter converges below its old ceiling.
pardon	The shortcut mathematics doesn't have: not computing the inverse, but agreeing by decree to stop demanding it.

Where the metaphor tears

Three honest failures.

One-wayness is a conjecture — even in cryptography.

Nobody has proven that factoring is hard; no one has proven any function one-way (doing so would settle P vs NP). The entire edifice rests on "we've looked very hard and found no shortcut." The metaphor must inherit that humility: some undoings believed impossible turn out to have shortcuts — an apology executed perfectly, a truth told at exactly the right moment, or simply time, which quietly re-prices every search. Treat "irreversible" as a working assumption, never a verdict.

The trust meter is hand-set.

The reputation model above is disclosed but invented: 0.15 gain, 0.72 ceiling decay. Real rebuilding varies enormously with the community's memory and the grace available — and some betrayals (whistleblowing, leaving the faith) are betrayals only from one side of the ledger. The instrument shows a shape, not a law.

The lens can rationalize despair.

"Can't be undone" almost always means "can't be undone cheaply" — a resource claim, not a prohibition. And unlike a CPU, a person can pay superpolynomial costs in small installments for years: that is the actual business model of repair, therapy, restitution, and reconciliation. If the metaphor ever whispers that trying is pointless, it has torn; the honest reading is the opposite — start paying early, because the debt compounds.