This paper is a contribution that is a step towards theoretical guarantees for adversarial learning. It is timely, well-written with sound theoretical findings. It the authors could provide to empirical evidence of their theoretical findings, this would make the contribution even more compelling.