4e7eec9b91
ntru lwr oprf
2026-01-08 11:01:25 -07:00
12e09718d2
ntru prime
2026-01-08 10:17:25 -07:00
9c4a3a30b6
feat(oprf): add production-grade Silent VOLE authentication protocol
...
Implements complete registration + login flow:
- Registration: Client/Server exchange PCG seeds (once)
- Login: Single-round (pcg_index + masked_input → evaluation)
New types:
- VoleRegistrationRequest/Response - PCG seed exchange
- VoleUserRecord - Server's stored user data
- VoleClientCredential - Client's stored credential
- VoleLoginRequest/Response - Single-round login messages
Key properties:
- Single-round online phase after registration
- Perfect privacy (server cannot fingerprint users)
- ~4KB round-trip (vs ~8KB for Ring-LPR)
- Deterministic OPRF output (LWR guaranteed)
- Wrong password correctly rejected
All 211 tests passing.
2026-01-07 13:04:14 -07:00
d8b4ed9c2d
feat(oprf): add revolutionary VOLE-LWR helper-less unlinkable OPRF
...
Implements a novel post-quantum OPRF combining:
- VOLE-based masking (prevents fingerprint attacks)
- LWR finalization (no reconciliation helpers transmitted)
- PCG pre-processing (amortized communication cost)
- NTT-friendly q=65537 (WASM performance)
Key fixes during implementation:
- LWR parameters: p=16, β=1 ensures 2nβ²=512 < q/(2p)=2048
- Password element must be UNIFORM (not small) for LWR to work
- Server subtracts v=u·Δ+noise, client just rounds (no addition)
Performance: ~82µs full protocol (vs 60µs fast, 99µs unlinkable)
Security: UC-unlinkable, helper-less, post-quantum (Ring-LWR)
All 206 tests passing.
2026-01-07 12:59:20 -07:00
8d58a39c3b
feat(oprf): add LEAP-style truly unlinkable OPRF with commit-challenge protocol
...
- Implement commit-challenge protocol to prevent fingerprint attack
- Use Learning With Rounding (LWR) instead of reconciliation helpers
- Add mathematical analysis document (docs/LEAP_ANALYSIS.md)
- 8 new tests, 197 total tests passing
- Benchmark: ~108µs (102x faster than OT-based, truly unlinkable)
The key insight: client commits to r BEFORE server sends challenge ρ,
so server cannot predict H(r||ρ) to extract A·s+e fingerprint.
2026-01-07 12:36:44 -07:00
f022aeefd6
feat(oprf): add split-blinding unlinkable OPRF (partial unlinkability)
...
- Implement split-blinding protocol with C, C_r dual evaluation
- Add 7 security proof tests for unlinkability properties
- Add benchmarks: ~101µs (109x faster than OT-based)
- Note: Server can compute C - C_r fingerprint (documented limitation)
2026-01-07 12:29:15 -07:00
0099a6e1fb
proofs
2026-01-06 12:55:40 -07:00
dfa968ec7d
initial
2026-01-06 12:49:26 -07:00
