Sign in

Helger Lipmaa

@helger.bsky.social
596 followers 291 following 232 posts

Cryptography professor at the University of Tartu, Estonia. Zero-Knowledge. SNARKs.

PostsRepliesMedia
Reposted by Helger Lipmaa
Tom Gur @tomgur.bsky.social · 15/09/2026
Goldreich’s short take on AI proofs is thought-provoking (and the Borges reference is quite on point). www.wisdom.weizmann.ac.il/~oded/on-pro...
wisdom.weizmann.ac.il
On AI replacing Mathematicians
0216
Reposted by Helger Lipmaa
Transactions on Machine Learning Research @tmlrorg.bsky.social · 16/09/2026
TMLR has faced a deluge of submissions, necessitating stricter desk rejection policies due to limited reviewer capacity Co-EiC Nihar Shah reached out to authors of 10 papers slated for desk reject. Could they answer questions about their *own* submission? medium.com/@TmlrOrg/ask...
medium.com
Asking Authors About Their Own Papers
By Nihar B. Shah
116164
Reposted by Helger Lipmaa
Maris Ozols @marisozols.bsky.social · 21/09/2026
"This model has now resolved more than 100 long-standing open problems across most areas of mathematics." openai.com/index/adviso... terrytao.wordpress.com/2026/09/21/a... agmai.org
openai.com
Advisory Group on Mathematics and Artificial Intelligence
OpenAI is working with an independent Advisory Group on Mathematics and Artificial Intelligence to guide the review and communication of emerging AI results.
022
Reposted by Helger Lipmaa
Miro Haller @mirohaller.bsky.social · 21/09/2026
We finally finished the universal signature forgery for 1024-bit RSA! 2^32 oracle queries, 1200 core years precomputation, 180 core years for an individual forgery, and 3 years of human labor (no AI involved) by Laura, Adam, Nadia, Emmanuel and me to pull of this computation against real HSMs.
14019
Helger Lipmaa @helger.bsky.social · 21/09/2026
but who else should be using AI submission but people in the ML community who know AI inside out?
010
Helger Lipmaa @helger.bsky.social · 18/09/2026
A different view. As a cryptographer (or maybe, as me - some cryptographers are in a different camp), I mostly agree with what @wtgowers.bsky.social is saying - my goal is to solve problems, and if AI does it better, then so be it. My problem is ethical. The way (say) OpenAI approaches it is wrong.
031
Helger Lipmaa @helger.bsky.social · 13/09/2026
garymarcus.substack.com/p/two-dire-w...
garymarcus.substack.com
Two dire warnings, one from Terence Tao, the other from someone who just quit Anthropic
Lots to consider
010
Helger Lipmaa @helger.bsky.social · 11/09/2026
Signed
062
Reposted by Helger Lipmaa
Chris Peikert @chrispeikert.bsky.social · 10/09/2026
“Now Lean, particularly in Navier-Stokes papers, is being used as a time-stamp, a way to claim your theorem before having to write it up properly in an explainable way.” A sentence that would’ve been seen as the ravings of a madman just ~1 year ago. blog.computationalcomplexity.org/2026/09/navi...
blog.computationalcomplexity.org
Navier-Stokes and Lean
I was working on this week's post on Lean after reading Kevin Hartnett's book  The Proof in the Code: How a Truth Machine Is Transforming Ma...
0248
Reposted by Helger Lipmaa
Ryan O'Donnell @booleananalysis.bsky.social · 10/09/2026
Am teaching grad complexity theory at CMU; about 1/3 of the lectures will be new (vs. last time), 'modern' results. Videos are going onto www.youtube.com/@ComplexityT... which will later also feature student videos. We did Williams (/Cook-Mertz/Shalunov) TIME(t) in SPACE(~√t) today.
youtube.com
Complexity Theory At Carnegie Mellon
05717
Reposted by Helger Lipmaa
Trevor A. Branch @trevorabranch.bsky.social · 08/09/2026
Millennium math problem solved by OpenAI may have "regurgitated" competitors unpublished work... also they spent more than $22 million in computing power in one week to scoop them. techcrunch.com/2026/09/08/o...
techcrunch.com
OpenAI fought dirty on career-making math problem, says NYU mathematician | TechCrunch
There is a $1 million bounty for the first person providing a solution to the Navier-Stokes existence and smoothness problem.
391331459
Helger Lipmaa @helger.bsky.social · 08/09/2026
A blog post by the final boss
001
Reposted by Helger Lipmaa
Quantian @quantian.bsky.social · 08/09/2026
Dancing very very VERY close to saying “OpenAI stole our almost-complete proof of Navier-Stokes from internal access to our ChatGPT sessions because they were desperate to scoop Anthropic” which is absolutely 100% a believable thing OpenAI would do right now cims.nyu.edu/~tristanb/st...
381556449
Helger Lipmaa @helger.bsky.social · 04/09/2026
Mathematicians and AI. Kraftwerk was so much ahead of its time. www.youtube.com/watch?v=6ozW...
youtube.com
Kraftwerk - Pocket Calculator - Official Music Video
YouTube video by BrKlingKlang
010
Helger Lipmaa @helger.bsky.social · 12/08/2026
I have complicated feelings about this
040
Reposted by Helger Lipmaa
Error Correction Zoo @eczoo.bsky.social · 11/08/2026
We quantified how much closer OpenAI's improvement over MRRW brings us to GV lower bound: at most 2%. Gain over MRRW: at most ~1%.
012
Reposted by Helger Lipmaa
Petra Schwer @petraschwer.bsky.social · 10/08/2026
Like many others I was feeling the lack of a platform where the full spectrum of opinions (in particular also lesser heard voices) on "math and AI" may get an audience. Now here it is! Think about contributing and share it widely! proofsandprompts.com #math #mathsky #llm #AI #mathandai
proofsandprompts.com
Proofs and Prompts
Notes from the common room
12714
Reposted by Helger Lipmaa
Anthropic {bot} @anthropicai.xmirror.bot · 10/08/2026
We asked an unreleased research version of Claude to take a stab at the Riemann hypothesis. It didn’t solve it, but it did make strides on a related problem: it increased the lower bound for the fraction of zeros of the Riemann zeta function that satisfy the hypothesis from 41.6% to 67.2%.
anthropic.com
Learning more about Claude's mathematical capabilities
An unreleased version of Claude has made strides on a problem related to the Riemann hypothesis. It improved the lower bound for the fraction of zeros of the Riemann zeta function that satisfy the hypothesis, increasing it from 41.6% to 67.2%.
510513
Helger Lipmaa @helger.bsky.social · 10/08/2026
who knew PIRs would be interesting :o
020
Helger Lipmaa @helger.bsky.social · 10/08/2026
Markle tree - thee very British/snobbish Merkle tree
010
Reposted by Helger Lipmaa
Lance Fortnow @lance.fortnow.com · 09/08/2026
Isik Ulusan, a U Mass student, created Complexle, like Wordle but you guess complexity classes. For each guess you get hints (set-theoretic inclusion, the type of model it is defined on, uniformity, etc.) for a total of 6 guesses. Give it a try. iulusan.github.io/co...
1245
Helger Lipmaa @helger.bsky.social · 06/08/2026
This reminds me of the numerous stories about how wishes to genies backfire. AKA The Monkey's Paw (en.wikipedia.org/wiki/The_Mon...)
en.wikipedia.org
The Monkey's Paw - Wikipedia
030
Helger Lipmaa @helger.bsky.social · 06/08/2026
www.youtube.com/watch?v=7JwE...
youtube.com
How Shafi Goldwasser Co-Invented Zero-Knowledge Proofs
YouTube video by a16z crypto
000
Reposted by Helger Lipmaa
Chris Peikert @chrispeikert.bsky.social · 02/08/2026
1/ Initial reactions after some hours with this groundbreaking result proving the NP-hardness of poly-approx CVP/NCP: It is most likely correct, but more importantly, it is original, elegant, and beautiful! (Also: it is easy to improve, quantitatively.) openai.com/index/ten-ad...
openai.com
Ten advances in mathematics and theoretical computer science
OpenAI shares new results on long-standing open problems in mathematics and theoretical computer science, including advances in geometry, cryptography, and complexity.
210328
Reposted by Helger Lipmaa
Fernando 🌺🌌 @eudoxia.bsky.social · 02/08/2026
I wrote about OpenAI's Astra results, how AI will dissolve mathematics, and how people will cope about it: borretti.me/article/math...
borretti.me
Mathematics Without Mathematicians
We must know. We shall not know.
2293
Reposted by Helger Lipmaa
Martin R. Albrecht @malb.bsky.social · 01/08/2026
OpenAI claim a proof that CPV is NP-hard for polynomial approximation factors. openai.com/index/ten-ad...
Screenshot of the text: "Closest vector problem. Polynomial-factor hardness of approximation for the closest vector problem, a foundational lattice question related to post-quantum cryptography."
084
Reposted by Helger Lipmaa
Clément Canonne @ccanonne.github.io · 01/08/2026
TCS+, the longest-running theoretical #computerscience seminar, will soon resume for the Fall. Let us know what you'd like to hear about (results, speakers, topics), and any suggestions you may have! sites.google.com/view/tcsplus... #TCSSky @tcsplus.bsky.social
sites.google.com
TCS+ - Suggest a talk
Suggest a talk
13011
Reposted by Helger Lipmaa
Michael Barany @mjb.mathstodon.xyz.ap.brid.gy · 29/07/2026
next Greek epic for hollywood treatment needs to be Euclid's Elements. overdue
76126
Reposted by Helger Lipmaa
Chris Peikert @chrispeikert.bsky.social · 28/07/2026
This is a very cool and exciting discovery by Claude Mythos! It found a serious 𝒎𝒂𝒕𝒉𝒆𝒎𝒂𝒕𝒊𝒄𝒂𝒍 attack on the post-quantum signature scheme HAWK, an "on-ramp" candidate for potential NIST standardization. www.anthropic.com/research/dis...
anthropic.com
Discovering cryptographic weaknesses with Claude
Anthropic researchers find weaknesses in cryptographic algorithms with Claude Mythos Preview
23218
Reposted by Helger Lipmaa
Quanta Magazine @quantamagazine.org · 24/07/2026
New York University professor Hong Wang has won the Fields Medal for her work three-dimensional Kakeya set conjecture, inspired by a simple question that has puzzled mathematicians for more than a century. But what is a “Kakeya-type” problem?
youtube.com
A Once-in-a-Century Proof: The Kakeya Conjecture
A simple question about a spinning needle has haunted mathematicians for more than a century. It led to the Kakeya conjecture, a cornerstone of modern analysis connecting geometry, fractals, and the…
0247
Reposted by Helger Lipmaa
Lance Fortnow @lance.fortnow.com · 18/06/2026
Domagoj Bradač gives a tight exponent for the smallest n, such that any graph on n vertices has either a clique of size s or an independent set of size k. For fixed s and large k, n is k^{s-1} up to polylog factors. A major result in Ramsey theory.
arxiv.org
Off-diagonal Ramsey numbers
For positive integers $s$ and $k$, the Ramsey number $r(s,k)$ is the minimum integer $n$ such that any graph on $n$ vertices contains a clique of size $s$ or an independent set of size $k$. We...
0245
Reposted by Helger Lipmaa
ePrint Updates @eprint.ing.bot · 09/06/2026
SNARGs for NP from Unprovability of Mathematical Theorems (Yao-Ching Hsieh, Abhishek Jain, Jiatu Li, Surya Mathialagan) ia.cr/2026/1180
Abstract. Modern cryptography relies on the intractability of computational problems. We present an approach to building cryptography from a new source of hardness: .

Our main result is a construction of succinct non-interactive arguments (SNARGs) for NP under a new, but natural, assumption on the hardness of proving lower bounds in proof complexity. Specifically, our assumption states that it is impossible to prove, within a weak bounded arithmetic theory, the correctness of certifying hard tautologies against Extended Frege. This assumption is inspired by an informal mathematical challenge proposed by Razborov [Ann. Math. ’15], and can be viewed as a generalization of an unconditional unprovability result due to Krajíček and Pudlák [J. Symb. Log. ’89].

Our construction is a simple variant of the SNARG construction of Jin, Kalai, Lombardi, and Vaikuntanathan [STOC ’24]. While the soundness of their construction was proven only for a subclass of NP, we prove its soundness for all of NP under our assumption. At the heart of our result is the observation that cryptographic reasoning is simple in a formal sense: the security proof of most cryptographic primitives can be formalized in a weak theory. In particular, we show how to formalize the scheme of Jin et al. in Jeřábek’s theory APC₁ [J. Symb. Log. ’07], a weak theory of bounded arithmetic.
Image showing part 2 of abstract.
022
Reposted by Helger Lipmaa
ePrint Updates @eprint.ing.bot · 08/06/2026
Correlation Intractability for all Batched Relations (Damiano Abram, Giulio Malavolta, Lawrence Roy) ia.cr/2026/1140
Abstract. The Fiat-Shamir transform is a central tool in cryptography and understanding its soundness is both a theoretically challenging and practically pressing question. Correlation intractable hash functions offer a method to instantiation Fiat-Shamir in the standard model. In short, a hash function is correlation-intractable for a relation ℛ if it is computationally hard to find an input x such that ℛ(x, Hash(x)) = 1.

In this work we present the first construction of a correlation-intractable hash function family, where the complexity of the hash does not depend on the complexity of the relation. Besides being better aligned with the way Fiat-Shamir is used in practice, our construction implies correlation intractability for all (possibly inefficient) batched searchable relations, i.e., searchable relations that can be decomposed as direct product of other searchable relations. Using complexity leveraging, we then compile our construction into correlation intractability for all batched relations. All of our results follow from the hardness of the decomposed short-integer solution (DSIS) problem, the natural search analogue of decomposed LWE, which we show to be at least as hard.

As a direct consequence from prior work, our result implies that the parallel repetition of any three-message proof cannot be zero-knowledge (unless BPP = NP).
Image showing part 2 of abstract.
011
Reposted by Helger Lipmaa
ePrint Updates @eprint.ing.bot · 08/06/2026
On the Impossibility of SNARGs with Short CRS (or: Revisiting Gentry-Wichs Barrier in the Non-adaptive Setting) (Liyan Chen, Zhengzhong Jin) ia.cr/2026/1144
Abstract. We study the inherent barriers to constructing non-adaptively sound succinct non-interactive arguments (SNARGs) for NP with a CRS whose length is sublinear in the witness length. Our results cover both the standard SNARGs and SNARGs with an additional updatable feature (i.e. incrementally verifiable computation for NP).

-   For updatable SNARGs, we show a black-box separation from falsifiable assumptions for uniform polynomial-time reductions, assuming sub-exponential hardness of learning with error.
-   For general SNARGs, we show a black-box separation from falsifiable assumptions for non-uniform polynomial-time reductions that only non-adaptively make an instance-size-independent number of queries to the adversary, assuming the existence of sub-exponentially secure super-bit generators. We observe that all known SNARG constructions from polynomial hardness of standard assumptions have 1-query soundness reductions. Thus, our result complements existing constructions.

Previously, the seminal work [Gentry-Wichs, STOC’11] showed a black-box separation of SNARGs from falsifiable assumptions in the adaptive soundness setting. We explore whether any barriers exist in the non-adaptive setting. To obtain our result, we derive a simulation lemma for unbounded polynomial-length auxiliary inputs assuming super-bit generators.
Image showing part 2 of abstract.
031
Reposted by Helger Lipmaa
Irish Learning Technology Association @iltasky.bsky.social · 03/06/2026
AI in education = commercialisation of a collective responsibility outsourcing a social, civic, and democratic process of cultivating the coming generation to commercial and capitalist enterprise whose priority is profit
AI in education = commercialisation of a collective responsibility

outsourcing a social, civic, and democratic process of cultivating the coming generation to commercial and capitalist enterprise whose priority is profit
04120
Reposted by Helger Lipmaa
Clément Canonne @ccanonne.github.io · 04/06/2026
Huge congratulations to Ilias Diakonikolas, Gautam Kamath, Daniel Kane, Jerry Li, Ankur Moitra, and Alistair Stewart on being awarded the Gödel prize for their breakthrough work on algorithmic robustness! www.sigact.org/prizes/g%C3%...
sigact.org
ACM SIGACT - Gödel Prize
1678
Reposted by Helger Lipmaa
Lance Fortnow @lance.fortnow.com · 03/06/2026
As US science funding becomes more limited, more bureaucratic, more political, we turn more to industry and foundations to help fund and set our research agenda. And now we have to deal with the consequences. My thoughts on yesterday's State of the Sciences Address:
blog.computationalcomplexity.org
The Industrialization of Academic Research
Yesterday, National Academy of Sciences President Marcia McNutt delivered her last annual State of the Sciences Address . Overall the talk b...
031
Helger Lipmaa @helger.bsky.social · 03/06/2026
youtu.be/5GUcvSAJcJw?...
youtu.be
Turing Award Winner: P vs NP, Zero-Knowledge Proofs, Quantum Computation | Avi Wigderson
YouTube video by Ryan Peterman
021
Reposted by Helger Lipmaa
Philipp Muens @muens.io · 01/06/2026
Wow! Alfred Menezes just published this 182 page "A Gentle Introduction to Lattice-Based Cryptography" paper. I just skimmed through it, but it looks like an invaluable resource if you want to study lattices and how they're used in (PQ) Cryptography. eprint.iacr.org/2026/1098
eprint.iacr.org
A gentle introduction to lattice-based cryptography
We present the quantum-safe Kyber key encapsulation mechanism (ML-KEM) and the Dilithium signature scheme (ML-DSA). We also develop the mathematical background on lattices needed to understand why Kyb...
1147
Reposted by Helger Lipmaa
European Research Council (ERC) @erc.europa.eu · 29/05/2026
📢 2026 ERC Advanced Grant call is open for applications! Are you an established, leading researcher who needs long-term funding to pursue a ground-breaking research project? The ERC Advanced Grant could be for you. Application portal 👉 link.europa.eu/QCDXct #ERCAdG #research #grant #funding
02316
Reposted by Helger Lipmaa
Greg Egan @gregegansf.bsky.social · 28/05/2026
“The sum-product conjecture is false for real numbers” THOMAS F. BLOOM, WILL SAWIN, CARL SCHILDKRAUT, AND DMITRII ZHELEZOV A human proof that exploits the same kind of “tower of fields” that was used in the AI-generated counterexample to the unit-distance conjecture!
arxiv.org
The sum-product conjecture is false for real numbers
We disprove the sum-product conjecture for real numbers by constructing arbitrarily large $A\subset \mathbb{R}$ (whose elements are algebraic integers in a number field of degree $\asymp \log\lvert A\...
4457
Reposted by Helger Lipmaa
Gautam Kamath @gautamkamath.com · 28/05/2026
In the last 48h: - Jr researcher asked me wheter to use AI in making talks - Saw two talks, with AI {slop, enhanced} slides Collected my thoughts and wrote a post. Tl;dr: don't steal your own thinking, don't remove *you* from your talks. Also, give a &#@% about your talks.
24913
Helger Lipmaa @helger.bsky.social · 26/05/2026
Me and some of my academic offspring attending ZKProof 2026
150
Reposted by Helger Lipmaa
Timothy Gowers @wtgowers.bsky.social · 20/05/2026
OpenAI's claim that this is a central conjecture in discrete geometry is not an exaggeration. This will I think be looked back on as the first time that AI solved a major mathematics problem (defined as a problem that all experts in some subfield had thought about). openai.com/index/model-...
openai.com
An OpenAI model has disproved a central conjecture in discrete geometry
An OpenAI model solved the 80-year-old unit distance problem, disproving a major conjecture in discrete geometry and marking a milestone in AI-driven mathematics.
17652191
Reposted by Helger Lipmaa
Quanta Magazine @quantamagazine.org · 19/05/2026
A zero-knowledge proof is an interactive process. That makes it strikingly different from ordinary mathematical proofs, which can be written down in a textbook. www.quantamagazine.org/how-unknowab...
0225
Reposted by Helger Lipmaa
Quanta Magazine @quantamagazine.org · 15/05/2026
If a vulnerability exists, but it’s impossible to prove that it exists, then there’s no way to take advantage of it. Rahul Ilango used this insight to build a new type of cryptography powered by unprovable mathematical statements. www.quantamagazine.org/how-unknowab...
0246
Reposted by Helger Lipmaa
European Research Council (ERC) @erc.europa.eu · 14/05/2026
Are you a researcher based in the USA 🇺🇸 or Canada 🇨🇦 interested in pursuing curiosity-driven research in Europe? Join the ERC and Euraxess for a webinar exploring ERC funding opportunities. 👇️ 📅 20 May 2026 🕚 11:30 AM ET | 8:30 AM PT 💻 Online Find out more and register:
buff.ly
ERC Grants Info Session: Funding for Excellent Frontier Research
Join EURAXESS North America and the European Research Council Executive Agency for a webinar on the bottom-up funding schemes that make up the European Research Council grants. The ERC is the premier…
01416
Reposted by Helger Lipmaa
Quanta Magazine @quantamagazine.org · 12/05/2026
Shafi Goldwasser (left), Silvio Micali (right), and Charles Rackoff devised a way to prove that a statement is true without revealing anything about why. www.quantamagazine.org/how-unknowab...
22610
Helger Lipmaa @helger.bsky.social · 12/05/2026
(Shahla - ex-student)
020
Helger Lipmaa @helger.bsky.social · 12/05/2026
eprint has limited the rate for eprint requests for Eurocrypt participants. Serves us well, we should take it as a vacation week :-) Too Many Requests The user has sent too many requests in a given amount of time. Apache/2.4.67 Server at eprint.iacr.org Port 443
eprint.iacr.org
Cryptology ePrint Archive
The Cryptology ePrint Archive provides rapid access to recent research in cryptology.
020