Fig. 3

One of the cryptographers has paid (green). Every cryptographer tosses a coin and shows it to his right-hand neighbour. Then, he computes the XOR of his coin with the coin on his left-hand neighbour. The cryptographers who did not pay announce this result, the cryptographer who paid (if any) announces the inverse. Here: \(0 \oplus 0 \oplus 1 = 1\) which shows that one of the cryptographers paid and not the NSA