On the size of a restricted sumset with application to the binary expansion of √d