- Implement commit-challenge protocol to prevent fingerprint attack - Use Learning With Rounding (LWR) instead of reconciliation helpers - Add mathematical analysis document (docs/LEAP_ANALYSIS.md) - 8 new tests, 197 total tests passing - Benchmark: ~108µs (102x faster than OT-based, truly unlinkable) The key insight: client commits to r BEFORE server sends challenge ρ, so server cannot predict H(r||ρ) to extract A·s+e fingerprint.
9.5 KiB
9.5 KiB