iiinova — where your digital self keeps evolving

Reposted by Carsten Baum

Christina Gravert @cgravert.bsky.social · 10/06/2025

Denmark is best in EU in getting workers back into jobs (twice the average rate). They also do tons of RCTs to find out what works and apply behavior science. Can’t say it’s causal, but it’s an interesting correlation at least.

073

Carsten Baum @cryptocarsten.bsky.social · 04/06/2025

The 7th workshop on Privacy Preserving Machine Learning will take place on August 17, 2025 (Sunday), as an affiliated event of the 45th CRYPTO 2025 conference.

143

Reposted by Carsten Baum

Ben Adida @benadida.com · 24/05/2025

Ahem.

New York Times headline "Crypto investor charged with kidnapping and torturing man for weeks"

Xkcd #538, comparing crypto nerd imagination of breaking RSA vs reality of torturing the password holder.

052

Carsten Baum @cryptocarsten.bsky.social · 20/05/2025

Oh wow, this is really great work. Recent results on PCGs allowed much more efficient MPC preprocessing (among other things) using somewhat new assumptions. Apparently, these assumptions are too strong. Congratulations to the authors on their IACR grant slam of breaks :)

051

Reposted by Carsten Baum

Martin R. Albrecht @malb.bsky.social · 08/05/2025

This is cool heimberger.xyz/oprfs.html

heimberger.xyz

PQ-OPRF table

0136

Carsten Baum @cryptocarsten.bsky.social · 07/05/2025

Never thought I'd participate in making a whole scientific conference dance the Macarena. Yet here we are.

490

Reposted by Carsten Baum

Sabine Oechsner @proofnerd.bsky.social · 05/05/2025

Our paper on attacking concurrent MPC implementations is finally on eprint 🎉 (And @schollster.bsky.social will present it at S&P 2025!) A summary 🧵

2125

Reposted by Carsten Baum

Nigel Smart @smartcryptology.bsky.social · 05/05/2025

Satellite collision detection via MPC is now faster... conference.sdo.esoc.esa.int/proceedings/... #cryptography

conference.sdo.esoc.esa.int

071

Carsten Baum @cryptocarsten.bsky.social · 05/05/2025

It takes a certain academic age and amount of accomplishments that allows you to use Comic Sans AND get away with it.

030

Carsten Baum @cryptocarsten.bsky.social · 04/05/2025

Don't forget to submit your most hilarious talk, musical performance, general announcement or recent result to the Eurocrypt 2025 Rump Session!

043

Carsten Baum @cryptocarsten.bsky.social · 02/05/2025

Next week I'll be at IACR Eurocrypt in Madrid. Let's have a chat if you're also around!

010

Carsten Baum @cryptocarsten.bsky.social · 02/05/2025

ZK deployed in get another use case. Yay!

172

Reposted by Carsten Baum

spooky Deirdre Connolly¹ ² at a distance @durumcrustulum.com · 02/05/2025

"To help foster a safer, more secure environment for everyone, we will also open source our ZKP technology to other wallets and online services."

24614

Carsten Baum @cryptocarsten.bsky.social · 01/04/2025

Given the behavior of the current US administration, it will be very hard to tell truth from joke news this April 1st.

060

Carsten Baum @cryptocarsten.bsky.social · 29/03/2025

Sure. Great idea. Planning conferences in the US. So, who despite US Americans and Russians do you think will go at this point?

451

Carsten Baum @cryptocarsten.bsky.social · 26/03/2025

I guess we need to update our security games?

190

Carsten Baum @cryptocarsten.bsky.social · 24/03/2025

The Trump admin communicates on Signal and added a journalist to a war planning chat group. Despite the obvious trainwreck that this news is (but not surprising), I'd like to thank them all for some extra material I'll teach tomorrow in a course about private communication :)

280

Reposted by Carsten Baum

Martin R. Albrecht @malb.bsky.social · 21/03/2025

Update on crypto.iacr.org/2025/

Given recent instances of US visa holders and residents being detained or deported by US immigration authorities, we understand that some members of our community may not feel safe traveling to the US for Crypto this year. We want to assure everyone that we will provide the option to present and attend remotely.

26639

Carsten Baum @cryptocarsten.bsky.social · 21/03/2025

Today's Nordicrypt is going poetic :)

021

Carsten Baum @cryptocarsten.bsky.social · 11/03/2025

Martin and Kenny are organizing a meeting to discuss the impact of recent political events on both our research and our community. If you're at Eurocrypt this year, consider attending!

140

Reposted by Carsten Baum

derek guy @dieworkwear.bsky.social · 01/03/2025

There has been a lot of chatter today about Zelenskyy's meeting with Trump, some regarding this moment when White House correspondent Brian Glenn asked if the Ukrainian president plans to wear a suit. I want to address idea in this thread. 🧵

467135463578

Carsten Baum @cryptocarsten.bsky.social · 25/02/2025

I'm happy to share some updates on the FAEST round 2 digital signature algorithm: - we have achieved substantially smaller signatures - at the same time, the new sign/verify algorithms achieve more competitive performance

1113

Carsten Baum @cryptocarsten.bsky.social · 19/02/2025

Don't forget to sign up for the next NordiCrypt on March 21st at ITU in Copenhagen, and submit your exciting recent research results as a talk! More info on sites.google.com/view/nordicr... See you there!

sites.google.com

NordiCrypt - NordiCrypt Spring 2025

Venue: The next NordiCrypt will take place on March 21st at ITU in Copenhagen. Find details about the venue under "Location". Schedule: 10:30-16:00. More details will follow. Catering: BYOC (bring y...

031

Carsten Baum @cryptocarsten.bsky.social · 17/02/2025

Great news from the cryptography team at DTU Compute: we managed to get 4 paper accepted at this year's IACR Eurocrypt conference. I'm very happy to see how our footprint in the research community grows :)

1100

Reposted by Carsten Baum

Matthew Green @matthewdgreen.bsky.social · 02/02/2025

I thought cryptocurrency was supposed to be a hedge against inflation and weird government screwups.

410725

Carsten Baum @cryptocarsten.bsky.social · 01/02/2025

I just want to tell every researcher in the US: if you want to get out of this misery, come to Europe. Plenty of research funding, good universities, you have rights under labor laws and most countries don't have sh*theads running the show.

3122

Reposted by Carsten Baum

ePrint Updates @eprint.ing.bot · 27/01/2025

How to Prove False Statements: Practical Attacks on Fiat-Shamir (Dmitry Khovratovich, Ron D. Rothblum, Lev Soukhanov) ia.cr/2025/118

Abstract. The Fiat-Shamir (FS) transform is a prolific and powerful technique for compiling public-coin interactive protocols into non-interactive ones. Roughly speaking, the idea is to replace the random coins of the verifier with the evaluations of a complex hash function.

The FS transform is known to be sound in the random oracle model (i.e., when the hash function is modeled as a totally random function). However, when instantiating the random oracle using a concrete hash function, there are examples of protocols in which the transformation is not sound. So far all of these examples have been contrived protocols that were specifically designed to fail.

In this work we show such an attack for a standard and popular interactive succinct argument, based on the GKR protocol, for verifying the correctness of a non-determinstic bounded-depth computation. For every choice of FS hash function, we show that a corresponding instantiation of this protocol, which was been widely studied in the literature and used also in practice, is not (adaptively) sound when compiled with the FS transform. Specifically, we construct an explicit circuit for which we can generate an accepting proof for a false statement.

We further extend our attack and show that for every circuit C and desired output y, we can construct a functionally equivalent circuit C^(*), for which we can produce an accepting proof that C^(*) outputs y (regardless of whether or not this statement is true). This demonstrates that any security guarantee (if such exists) would have to depend on the specific implementation of the circuit C, rather than just its functionality.

Lastly, we also demonstrate versions of the attack that violate non-adaptive soundness of the protocol – that is, we generate an attacking circuit that is independent of the underlying cryptographic objects. However, these versions are either less practical (as the attacking circuit has very large depth) or make some additional (reasonable) assumptions on the underlying cryptographic primitives.

03817

Reposted by Carsten Baum

Dulwich Quantum Computing @dulwichquantum.bsky.social · 13/01/2025

"Myths around quantum computation before full fault tolerance: What no-go theorems rule out and what they don't" arxiv.org/abs/2501.05694 The debunko-meter in this paper should be adapted as an industry standard.

A meter that measures the validity of a claim on the scale
Correct / Open question / Debunked

1472

Reposted by Carsten Baum

Matthew Green @matthewdgreen.bsky.social · 31/12/2024

If you’re part of a major company that’s advising your employees to use Signal after this Salt Typhoon thing, consider donating to Signal Foundation.

314136

Carsten Baum @cryptocarsten.bsky.social · 14/12/2024

With the year almost finished, I'm on my way to the last big professional event for me: I've been invited by the cryptography research group at NTT Japan to give a lecture series on (V)OLE and it's use cases. Looking forward to spread the word about FAEST, Mac'n'Cheese and all the good stuff :)

2191

Reposted by Carsten Baum

Marcel Keller @mkskeller.bsky.social · 13/12/2024

Ever wondered how to implement loops in MPC? My latest paper has an answer: it's all about finding the right balance.

1113