Hacker News Reader

The hashes sent to the client are cryptographically blinded, making it impossible for the client to determine the original CSAM hashes.

This is the information I was missing, thanks.