However, half of the database can be safely inspected without breaking privacy. A random choice is made between opening  or  (this choice can be derived from the secret key or from a true random source, such as dice or the stock market).
On the other hand, it's possible to inspect half of the database without breaching user privacy. A chance selection is made between revealing  or  (this decision can be derived from a confidential key or from an unpredictable source, like coin tosses or stock market trends).