leakage-attack

Searchable encryption where a server finds matching records in an encrypted database without learning the query or the data — but the access pattern it observes is itself an attack surface.

Browser-based ML-DSA leakage demo — watch a toy hill-climb descend to a CRYSTALS-Dilithium (FIPS 204) secret subkey once one bit of per-signature masking randomness leaks, no lattice reduction, beside the real-scale numbers from IACR ePrint 2026/472. Real local-optimization dynamics. No backends. No simulated math. Runs no attack on real ML-DSA.