cforler/catena — pull request #3 by Sc00bz (2014-01-06 20:56:02+00:00)
Title: Wrong output r[0] vs r[N-1]

Basically you are doing the work of LAMBDA but getting the security of LAMBDA-1.