iiinova — where your digital self keeps evolving

Reposted by Andrea Basso

Maria Corte-Real Santos @maria.isogeny.club · 03/09/2026

Rise and shine, it's time for the Isogeny Club Season Nine! isogeny.club

isogeny.club

The Isogeny Club

185

Andrea Basso @andreavbasso.bsky.social · 17/07/2026

I'm optimistic we can see some progress there in the near future, although maybe not all the way to optimal

000

Reposted by Andrea Basso

Krijn Reijnders @krijn.isogeni.es · 16/07/2026

Excited about isogenies? Wanna claim some rewards? Solve one of the seven Isogeny Problems, the hardest open problems in isogeny-based cryptography! Full write-up now on ePrint: ia.cr/2026/1431 Webpage: isogeni.es/problems Now with EVEN MORE REWARDS!!

isogeni.es

The Isogeny Problems

A list of foremost unsolved problems in isogeny-based cryptography, with expositions by leading experts.

1105

Andrea Basso @andreavbasso.bsky.social · 17/07/2026

I agree :D I'd say bonus, 1, 2, 3, 5, 4, 6, 7, but 2 and 3 are quite hard to compare

110

Reposted by Andrea Basso

Damien Robert @damienrobert.bsky.social · 05/07/2026

So what is MIKE? It is a post-quantum NIKE (non interactive key exchange) which has many nice properties:

111

Andrea Basso @andreavbasso.bsky.social · 11/06/2026

Accepted papers at CRYPTO 2026: iacr.org/cryptodb/dat...

iacr.org

Papers from CRYPTO 2026

072

Andrea Basso @andreavbasso.bsky.social · 21/05/2026

New paper out 🎉 We introduce a new UPKE based on FESTA that supports unbounded updates and whose security is equivalent to FESTA! Our main result: a (four-dimensional) variant of FESTA has uniformly random public keys, which means that any random walk is a valid pk update.

062

Andrea Basso @andreavbasso.bsky.social · 14/05/2026

Round 3 of the NIST additional signatures process announced! 🎉 And SQIsign is part of it!! ⛷️⛷️

Screenshot of email announcement saying:

Nine Candidates Advance to the Third Round of the Additional Digital Signatures for the PQC Standardization Process

After 18 months of evaluation, NIST has selected nine candidates for the third round of the Additional Digital Signatures for the Post-Quantum Cryptography (PQC) Standardization Process. The advancing digital signature algorithms are:

FAEST
HAWK
MAYO
MQOM
QR-UOV
SDitH
SNOVA
SQIsign
UOV

02613

Reposted by Andrea Basso

Sam Jaques @sejaques.bsky.social · 09/04/2026

Overdue quantum landscape update: sam-jaques.appspot.com/quantum_land... A 2d chart can only say so much. tl;dr new results are still overhyped, but definitely worth taking seriously. This chart is based on surface codes and a big question now is whether new codes can be practical (=>useless chart)

A cluttered and complicated chart relating qubit counts to qubit error rates, comparing today's devices to cryptographic attacks.

15122

Reposted by Andrea Basso

mccurley.bsky.social @mccurley.bsky.social · 31/03/2026

In honor of April Fool's Day (which has already started in Australia), I offer you debrisprint.iacr.org for AI-generated cryptology content.

debrisprint.iacr.org

Craptology debrisPrint Snarkive

1166

Reposted by Andrea Basso

Maria Corte-Real Santos @maria.isogeny.club · 06/03/2026

New PRISM improvements 🥳 We extended our PRISM paper to present two new variants: one that achieves strong unforgeability, and another that allows for smaller parameters and therefore faster signatures! eprint.iacr.org/2026/443.pdf

eprint.iacr.org

195

Andrea Basso @andreavbasso.bsky.social · 02/03/2026

We're organizing a workshop on cryptographic group actions bringing together the isogeny and code communities. The workshop is just before Eurocrypt, a quick train away from Rome in the beautiful Marche. Early registration ends this week, so grab your spot soon! magic-workshop.github.io

magic-workshop.github.io

MaGIC 2026 - Marche Workshop on Group Actions in Cryptography

A workshop dedicated to the study of cryptographic group actions, a rapidly evolving area at the intersection of algebraic geometry, number theory, and post-quantum cryptography. The workshop will bri...

075

Reposted by Andrea Basso

Damien Robert @damienrobert.bsky.social · 20/02/2026

I am very happy to announce that thanks to the hard work of many people (The "MIKE Team"), we now have a working implementation in SageMath of MIKE (Module Isogeny Key Exchange).

198

Andrea Basso @andreavbasso.bsky.social · 03/02/2026

It depends if you interpret the waiting period to apply to the authors or to the paper :) I think CiC and CHES have some form of this, but it doesn't automatically apply to all rejections: if the reviewers think the paper needs significantly more work, the authors cannot resubmit immediately

001

Andrea Basso @andreavbasso.bsky.social · 03/02/2026

A waiting period may not be the best option, but we probably need some kind of pre-review check. Right now, it takes very little work for authors to resubmit the same paper again and again until it gets through, while it takes the 3+ reviewers a considerable amount of work to re-review the paper

000

Andrea Basso @andreavbasso.bsky.social · 03/02/2026

The waiting period would be on resubmitting the same paper though, which may be helpful to prevent authors from spamming the same paper over and over again until they get lucky.

200

Reposted by Andrea Basso

mccurley.bsky.social @mccurley.bsky.social · 03/02/2026

The IACR board sent a survey to members last year, and it took us a while to analyze the results and publish findings. You can see them at iacr.org/surveyresults/

iacr.org

International Association for Cryptologic Research

289

Andrea Basso @andreavbasso.bsky.social · 09/01/2026

1. In the AIM, the Sigma protocol underlying SQIsign is sound without rewinding, which means we can show that SQIsign is provably secure in the QROM. 2. The CDH and DLOG problem for all SIDH-like key exchanges (M-SIDH, MD-SIDH, binSIDH, terSIDH, etc.) are equivalent in the AIM.

141

Andrea Basso @andreavbasso.bsky.social · 09/01/2026

New paper out! 🎉 We translate the algebraic group model to the (generic) isogeny setting, generalising previous results that were limited to oriented isogenies (we show that any result that holds in the AGAM also holds in the AIM). Using this model, we obtain two important results:

1123

Andrea Basso @andreavbasso.bsky.social · 16/12/2025

It also helps to announce those limits in advance, or communicate them clearly, or NOT delete rebuttals, or...

010

Andrea Basso @andreavbasso.bsky.social · 26/10/2025

This makes more sense than it seems: the time change happens at the same time in both time zones, which means in the UK it’s at 1am rather than 2am.

120

Reposted by Andrea Basso

Maria Corte-Real Santos @maria.isogeny.club · 23/09/2025

The Isogeny Club Season 7 starts today! At 5pm CEST, Bruno Sterner will talk about finding large smooth twins from short lattice vectors. More details at isogeny.club

1107

Reposted by Andrea Basso

Krijn Reijnders @krijn.isogeni.es · 15/09/2025

Announcing The Isogeny Problems! A curated list of the seven foremost unsolved problems in isogeny-based cryptography. Solving one of these profound questions would mark a monumental advance, and as a resolver you'd get eternal honor and epic rewards! Full list: isogeni.es/problems

isogeni.es

The Isogeny Problems

1166

Reposted by Andrea Basso

Diego F. Aranha @dfaranha.bsky.social · 09/09/2025

The EU wants to spend your money to assemble a giant mass surveillance machine with little effect on harm against children. Chat Control is not effective, weakens security for all and does not respect privacy. Contact your EU representatives and let them know. csa-scientist-open-letter.org/Sep2025

csa-scientist-open-letter.org

02010

Andrea Basso @andreavbasso.bsky.social · 09/09/2025

If you're a researcher in cryptography, security, or related areas, please consider signing it too. Signature collection is still open!

020

Andrea Basso @andreavbasso.bsky.social · 09/09/2025

More than 500 researchers have signed an open letter against the dangerous EU proposal on chat control. The proposal remains ineffective, undoes decades of results in E2E encryption, and threatens the privacy of half a billion citizens. csa-scientist-open-letter.org/Sep2025

csa-scientist-open-letter.org

11612

Andrea Basso @andreavbasso.bsky.social · 03/09/2025

New somewhat redesigned, somewhat expanded website at andreabasso.com! If you find any dead links or things not working properly, please let me know

andreabasso.com

andrea basso

010

Reposted by Andrea Basso

ePrint Updates @eprint.ing.bot · 31/07/2025

Using Learning with Rounding to Instantiate Post-Quantum Cryptographic Algorithms (Andrea Basso, Joppe W. Bos, Jan-Pieter D'Anvers, Angshuman Karmakar, Jose Maria Bermudo Mera, Joost Renes, Sujoy Sinha Roy, Frederik Vercauteren, Peng Wang, Yuewu Wang, Shicong Zhang, Chenxin Zhong) ia.cr/2025/1382

Abstract. The Learning with Rounding (LWR) problem, introduced as a deterministic variant of Learning with Errors (LWE), has become a promising foundation for post-quantum cryptography. This Systematization of Knowledge (SoK) paper presents a comprehensive survey of the theoretical foundations, algorithmic developments, and practical implementations of LWR-based cryptographic schemes. We introduce LWR within the broader landscape of lattice-based cryptography and post-quantum security, highlighting its advantages such as reduced randomness, improved efficiency, and enhanced side-channel resistance. We explore the evolution of security reductions from LWR to LWE, including recent advances that support practical parameter regimes and address challenges in both bounded and unbounded sample settings. This paper systematically reviews existing LWR-based schemes — including Saber, Lizard, Florete, Espada, Sable, and SMAUG — analyzing their design choices, parameter sets, and performance trade-offs. Furthermore, we examine the impact of LWR on side-channel resistance, failure probabilities, and masking efficiency, demonstrating its suitability for secure and efficient implementations. By consolidating the research spanning theory and practice, this SoK aims to guide future cryptographic design and standardization efforts leveraging LWR.

043

Reposted by Andrea Basso

Sofia Celi @claucece.bsky.social · 25/06/2025

And for For PhD & advanced MSc students! 🌍 Stipends available for students worldwide — thanks to our sponsors! 📋 Apply for stipends here: docs.google.com/forms/d/e/1F... 🖼️ Consider presenting your work in the Latincrypt poster session! 🔗 More info: ascrypto.org/2025/

docs.google.com

Call for Stipends - ASCRYPTO '25

022

Reposted by Andrea Basso

Sam Jaques @sejaques.bsky.social · 19/06/2025

An out-of-schedule update to my quantum landscape chart: sam-jaques.appspot.com/quantum_land..., prompted by @craiggidney.bsky.social 's new paper: arxiv.org/abs/2505.15917. A startling jump (20x) in how easy quantum factoring can be! Also: much improved web design!

A chart for quantum computers, of number of qubits versus error rate, on a logarithmic scale. Broadly it shows a large gap between current quantum computers in the bottom left, and a curve in the top right of the resources they need to break RSA.

36126

Andrea Basso @andreavbasso.bsky.social · 28/05/2025

For any polynomial-time abbiatese A... (abbiategrassese? abbiatese grasso?)

010

Andrea Basso @andreavbasso.bsky.social · 27/05/2025

Every time I'm writing a paper I always have the same question: is the attacker a person? Is the attacker a they or a it?

120

Andrea Basso @andreavbasso.bsky.social · 18/05/2025

By 2030 we will all be out of jobs

000

Andrea Basso @andreavbasso.bsky.social · 18/05/2025

Isogeny-based signatures have consistently had a breakthrough every two years! Let's see what 2026 will bring... (Well, except for SQIsignHD that came a year too late, but that's probably because of Covid)

A timeline of isogeny-based signatures over the years:
2012 - A signature from group actions: First signature from
isogenies in the literature
2014 - SIDH: Also proposes an identification protocol
2016 - GPS: First signature from endomorphism ring knowledge
2018 - SeaSign: First signature based on CSIDH
2020 - SQIsign: Compact and “practical" signature from endomorphism ring knowledge
2023 - SQIsignHD: HD representations make SQIsign signing much faster
2024 - SQIsign2D: Significantly improved SQIsign signing and verification

392

Reposted by Andrea Basso

Diego F. Aranha @dfaranha.bsky.social · 15/05/2025

Registrations for the Decrypting Diversity Summit are open: decryptingdiversity.com/registration/ The event's focus is to develop actions to better support underrepresented groups in cryptography while showcasing the exceptional career paths and research contributions of these communities.

decryptingdiversity.com

Decrypting Diversity Summit

124

Andrea Basso @andreavbasso.bsky.social · 17/05/2025

It's somewhat uncertain but probably not. But we'll share the slides, Sage exercises, and other material after the course

030

Andrea Basso @andreavbasso.bsky.social · 17/05/2025

Next week @lucianomaino.bsky.social and I will teach a week-long course on SQIsign at the University of Trento. The course will be both in-person and online: if you're interested, you can tune in Monday morning at 10:30 at unitn.zoom.us/j/88902079708 (details and full schedule in the image below)

Title of the PhD course: Advances in Cryptography and Codes - Part 1: SQIsign

Lecturers: Andrea Basso (IBM Research Zurich, CH),
Luciano Maino (University of Bristol, UK)

The course in short: The course offers a comprehensive and rigorous introduction
to SQIsign, an advanced isogeny-based digital signature scheme designed to resist
attacks from quantum computers. The course will present the mathematical
foundations on which SQIsign is based and the algorithmic background necessary to
understand and evaluate the security of SQIsign and other isogeny-based protocols.
Complementing the theoretical material, the course also includes a practical
laboratory where students will use SageMath to study and implement various
aspects of SQIsign.

Where (in presence): Department of Mathematics, University of Trento (IT)
Via Sommarive, 5, 38123, Trento
(online): https://unitn.zoom.us/j/88902079708 (Passcode: 532383)
When: From May 19, 2025 to May 28, 2025

Detailed Program:
Monday 19/05 10:30 - 12:30 (Room A205) & 14:30 - 16:30 (Room A221)
Tuesday 20/05 10:30 - 12:30 (Room A215) & 14:30 - 16:30 (Room A213)
Wednesday 21/05 10:30 - 12:30 (Room A218) & 14:30 - 16:30 (Room A215)
Thursday 22/05 10:30 - 12:30 (Room A209) & 14:30 - 16:30 (Room A220)
Friday 23/05 10:30 - 12:30 (Room A215) & 14:30 - 16:30 (Room A215)
Tuesday 27/05 11:30 - 12:30 – Q&A, optional (Room A218)
Wednesday 28/05 11:30 - 12:30 – Q&A, optional (Room A218)

1188

Reposted by Andrea Basso

COSIC @cosic.bsky.social · 12/05/2025

🥇The paper "PRISM: Simple And Compact Identification and Signatures From Large Prime Degree Isogenies", co-authored by COSIC, has won the best paper award at @IACR_News #PKC 2025 in Røros, Norway. #pkc2025 Link: link.springer.com/chapter/10.1...

0104

Reposted by Andrea Basso

Nigel Smart @smartcryptology.bsky.social · 04/04/2025

Only a few days left to submit your paper to the second volume of the 2025 edition of Communications in Cryptology.... cic.iacr.org

cic.iacr.org

IACR Communications in Cryptology

174

Reposted by Andrea Basso

Real World Crypto Symposium @rwc.iacr.org · 28/03/2025

Big announcement: RWC 2027 in Seattle! April 5-7 subject to board approval.

5115

Andrea Basso @andreavbasso.bsky.social · 24/03/2025

Registration is now open! www.cig.udl.cat/SQIparty2025...

034

Andrea Basso @andreavbasso.bsky.social · 21/03/2025

It's barebones (for now), but we have a website at swissogeny.github.io. And it has the slides of yesterday's talks!

swissogeny.github.io

Swissogeny Day

010

Andrea Basso @andreavbasso.bsky.social · 20/03/2025

Great talks today about group actions at the Swissogeny Day by Lorenz Panny and Ryan Rueger! We’re planning to host the next Swissogeny Day in the summer, if you’d like to attend, reach out!

2100