Implements a novel post-quantum OPRF combining: - VOLE-based masking (prevents fingerprint attacks) - LWR finalization (no reconciliation helpers transmitted) - PCG pre-processing (amortized communication cost) - NTT-friendly q=65537 (WASM performance) Key fixes during implementation: - LWR parameters: p=16, β=1 ensures 2nβ²=512 < q/(2p)=2048 - Password element must be UNIFORM (not small) for LWR to work - Server subtracts v=u·Δ+noise, client just rounds (no addition) Performance: ~82µs full protocol (vs 60µs fast, 99µs unlinkable) Security: UC-unlinkable, helper-less, post-quantum (Ring-LWR) All 206 tests passing.
8.6 KiB
8.6 KiB