Miro Haller @mirohaller.bsky.social · 21/09/2026Blind RSA applications operate in a threat model matching our setting, such as Privacy Pass. The attacker would need to solve a prohibitively large number of CAPTCHAs, but the scale of these apps mean they see requests of similar magnitude to our oracle queries for a single key. 041
Miro Haller @mirohaller.bsky.social · 21/09/2026While this attack is currently too expensive to run against the still widely used 2048-bit RSA, the bit security of those applications is lower than you'd expect from factoring: 2048-bit RSA has 90 bits of security in this threat model, and that projection likely overestimates the attack cost. 183
Miro Haller @mirohaller.bsky.social · 21/09/2026We finally finished the universal signature forgery for 1024-bit RSA! 2^32 oracle queries, 1200 core years precomputation, 180 core years for an individual forgery, and 3 years of human labor (no AI involved) by Laura, Adam, Nadia, Emmanuel and me to pull of this computation against real HSMs. 14019
Reposted by Miro HallerKenny Paterson @kennyog.bsky.social · 15/08/2026Signal is the gold standard for secure messengers. We broke Signal’s integrity (twice) in this paper via message injection attacks. @kientuong114.bsky.social presented this week at #USENIX and he and Noemi will present it again at #WAC (Crypto workshop) this weekend. Catch their talk if you can! 02911
Miro Haller @mirohaller.bsky.social · 11/08/2026Turns out you can’t assume warrants are always digital so protecting their integrity is actually not (only) a cryptographic problem. Very cool security paper that builds a solution that takes care of real world constraints (including messy physical warrants and bad scanners). 010
Miro Haller @mirohaller.bsky.social · 10/08/2026You can also register to attend WAC8--the workshop on attacks in cryptography, an affiliated event with Crypto 2026--remotely (for free). Just fill out this google form: forms.gle/1anNohNaJmtA...forms.gleWAC8 Remote RegistrationSign up with an email address to receive the Zoom link to attend the workshop on attacks in cryptography 8 (WAC8) remotely. All information about the workshop is on our website: https://wac8.cryptanal... 164
Miro Haller @mirohaller.bsky.social · 26/07/2026Don't forget to register for WAC8! Early registration ends today (July 26). Below is our finalized WAC8 program with 8 exciting talks. More infos on: wac8.cryptanalysis.fun 073
Miro Haller @mirohaller.bsky.social · 29/06/2026Time to submit your fresh new cryptanalysis results to WAC8 (Crypto'26 affiliated event) this week. The deadline is on Friday, July 3 (AoE). All infos about the call are on: wac8.cryptanalysis.fun 010
Reposted by Miro HallerTianxin Tang @koptxin.bsky.social · 17/06/2026I am looking for a (fully funded) PhD student working with me in Glasgow on provable security! www.iacr.org/jobs/item/4226iacr.orgPhD Student 087
Miro Haller @mirohaller.bsky.social · 11/06/2026The Workshop on Attacks in Cryptography 8 (WAC8) website is finally up, and our call for talks is open. Submit your cool cryptanalysis before July 3! We'll also invite speakers. If you had a favorite cryptographic attack from the last two years that we should invite, please put it in the comments. 074
Miro Haller @mirohaller.bsky.social · 04/05/2026The Cryptographic Applications Workshop (CAW) happens this Sunday in Rome! Just a reminder that if you're not coming to Rome you can still attend remotely. Just register here: forms.gle/2JZ7hLs8diQM... before May 8. See caw.cryptanalysis.fun for more infos and our program. 086
Reposted by Miro HallerNadim Kobeissi @nadim.computer · 17/04/2026Announcing the preliminary program for Cedarcrypt — our inaugural applied cryptography summer school and conference, July 13–16, 2026 at the American University of Beirut - Mediterraneo in Paphos, Cyprus! An absolutely fantastic program awaits — check it out, register today, and share widely!cedarcrypt.orgCedarcrypt 2026 — Applied Cryptography Summer School & ConferenceJoin us for four days of applied cryptography in the Mediterranean. July 13–16, 2026 at AUB Mediterraneo Campus, Paphos, Cyprus. 095
Miro Haller @mirohaller.bsky.social · 20/03/2026If you cannot attend in person, you can sign up to attend remotely (for free). We'll do our best to provide good video and audio quality, as well as the opportunity to ask questions remotely. To sign up for attending remotely, see caw.cryptanalysis.fun#registrationcaw.cryptanalysis.funCAWCryptographic Applications Workshop 033
Miro Haller @mirohaller.bsky.social · 20/03/2026The program for our Eurocrypt affiliated event CAW on May 10 is (mostly) finalized and published on: caw.cryptanalysis.fun We received many super exciting submissions! To register, select our workshop during conference registration on the Eurocrypt website once that opens: eurocrypt.iacr.org/2026/ 1135
Miro Haller @mirohaller.bsky.social · 21/01/2026We extended the deadline to Jan 30 (after Eurocrypt notifications). 000
Miro Haller @mirohaller.bsky.social · 19/01/2026Submission week for the Cryptographic Application Workshop (CAW), an affiliated event at Eurocrypt'26 in Rome! Please submit your talk proposals on constructive real-world crypto using the following instructions before Jan 23, 2026 AoE. All infos on: caw.cryptanalysis.fun. 187
Miro Haller @mirohaller.bsky.social · 11/11/2025If your curious on what to expect, you can watch the recording of some talks from this year here: youtube.com/playlist?lis... Or view the CAW 2024 program here: caw.cryptanalysis.fun/previous/202...youtube.comCAW 2025 - YouTubeThe Cryptographic Applications Workshop (CAW; https://caw.cryptanalysis.fun/) focuses on the construction and analysis of cryptography built for practice. In... 000
Miro Haller @mirohaller.bsky.social · 11/11/2025 3. Design and construction of cryptographic primitives and systems that also have an associated implementation or are being deployed. 4. The industry perspective on deployment and maintenance of cryptography in practice. All info on how to submit is here caw.cryptanalysis.fun#call-for-talkscaw.cryptanalysis.funCAWCryptographic Applications Workshop 100
Miro Haller @mirohaller.bsky.social · 11/11/2025In addition, CAW looks for submissions on the following topics: 1. Bringing crypto from academia into the world. 2. Analysis and proofs of schemes and protocols deployed in practice. 100
Miro Haller @mirohaller.bsky.social · 11/11/2025This year, CAW will have a specific focus on cryptography under real-world constraints and threat models, exploring various trade-offs that are often necessary when deploying cryptographic systems in practice. Submissions fitting the workshop theme of this year are especially encouraged. 100
Miro Haller @mirohaller.bsky.social · 11/11/2025This is the 3rd edition of the Cryptographic Application Workshop (CAW). CAW will take place on May 10, 2026, in Rome, Italy, right before Eurocrypt. The workshop consists of a mixture of invited and contributed talks on recent developments in the field of applied cryptography. 110
Miro Haller @mirohaller.bsky.social · 11/11/2025The call for talks for CAW 2026 (a workshop affiliated with Eurocrypt) is out! This year's motto is "cryptography under real-world constraints and threat models", but other applied cryptography is also very welcome. All info is on: caw.cryptanalysis.fun. 1128
Miro Haller @mirohaller.bsky.social · 11/08/2025You can find more information on our attacks in my blog post and our paper. And if you're in Seattle, come say hi at WOOT or USENIX! Blog post: mirohaller.com/posts/2025/0... Paper: www.usenix.org/system/files... 020
Miro Haller @mirohaller.bsky.social · 11/08/2025Shout out to Fortune Brands Connected Products (which owns Master Lock) for the great disclosure experience. We had an in-depth meeting with them where they provided context on the origin of the vulnerabilities, insights into their design decisions, and updates on the mitigation progress. 100
Miro Haller @mirohaller.bsky.social · 11/08/2025The session replay attack is due to a nonce reuse across sessions. The causes for the other attacks were more on the security side (protocol design, access control, buffer overflow). 100
Miro Haller @mirohaller.bsky.social · 11/08/2025As smart locks are used in house and hotel doors, attacks on them has impacts the physical safety of people. 100
Miro Haller @mirohaller.bsky.social · 11/08/2025Our WOOT paper went out of disclosure today. We found 5 attacks on the Master Lock D1000 which allow unauthorized unlocking, bypassing access revocation, forging log entries, and causing DoS. If you're in Seattle, come to our talk given by Chengsong, one of the students I mentored for this paper. 2103
Miro Haller @mirohaller.bsky.social · 02/05/2025The CAW workshop at Eurocrypt 2025 is just around the corner! Quick reminder that you can sign up (for free) to attend remotely by filling out this form until tomorrow (afternoon CEST): forms.gle/5JUMmYBj9LHW... The program on the website: caw.cryptanalysis.fun 030
Miro Haller @mirohaller.bsky.social · 09/04/2025This year, #CAW offers the option for remote participation to make our Eurocrypt workshop accessible to the members of our community that cannot or prefer not to travel to Madrid. Register on our website before May 2 (free): caw.cryptanalysis.fun The updated program is below. 062
Miro Haller @mirohaller.bsky.social · 18/03/2025#CAW offers again a few registration waivers. We hope these waivers will help local (grad/undergrad) students to attend our workshop and get a preview of cryptography beyond the classroom and make their first connections to the community. More info: caw.cryptanalysis.fun#student-regi... 153
Miro Haller @mirohaller.bsky.social · 18/03/2025Registration for in-person attendance of the workshop goes over Eurocrypt: eurocrypt.iacr.org/2025/registr...eurocrypt.iacr.orgEurocrypt 2025 registration44th Annual International Conference on the Theory and Applications of Cryptographic Techniques 000
Miro Haller @mirohaller.bsky.social · 18/03/2025We will later announce the overall workshop theme, but it will include two excellent invited speakers: Michele Orrù @tumbolia.bsky.social and Carmela Troncoso @carmelatroncoso.bsky.social and end with an audience discussion on the overarching topic. 100
Miro Haller @mirohaller.bsky.social · 18/03/2025Talk 9 at #CAW in the session on messaging: Rolfe Schmidt from @signal.org on "Designing a Post-Quantum Ratchet for Signal Messenger"; seeking feedback on their candidate designs to make the Double Ratchet protocol post-quantum secure. caw.cryptanalysis.funcaw.cryptanalysis.funCAWCryptographic Applications Workshop 110
Miro Haller @mirohaller.bsky.social · 18/03/2025Talk 8 at #CAW in the session on messaging: Phillip Gajland on "Shadofax: Combiners for Deniability"; providing a framework to reason about deniability for hybrid schemes and achieve it for a post-quantum secure AKEM. caw.cryptanalysis.funcaw.cryptanalysis.funCAWCryptographic Applications Workshop 110
Miro Haller @mirohaller.bsky.social · 18/03/2025Talk 7 at #CAW in the session on messaging: Emma Dauterman on "Designing Secret Recovery in Signal Messenger"; a restrospective on the lessons learned when designing a system to meet real-world constraints. caw.cryptanalysis.funcaw.cryptanalysis.funCAWCryptographic Applications Workshop 100
Miro Haller @mirohaller.bsky.social · 18/03/2025Talk 6 at #CAW in the session on messaging: Lea Thiemt on "Generic Anonymity Wrapper for Messaging Protocols"; a protocol transformation that achieves forward anonymity and post-compromise anonymity. caw.cryptanalysis.fun 100
Miro Haller @mirohaller.bsky.social · 18/03/2025Talk 5 at #CAW in the session on cryptographic constructions: Giacomo Fenzi @giacomofenzi.bsky.social on "Linear-Time Accumulation Schemes"; an efficient hash-based building block for proof-carrying data to provide computational integrity in a distributed setting. caw.cryptanalysis.funcaw.cryptanalysis.funCAWCryptographic Applications Workshop 110
Miro Haller @mirohaller.bsky.social · 18/03/2025Talk 4 at #CAW in the session on cryptographic constructions: Felix Günther on "(Hybrid) Obfuscation and Verifiable Decapsulation"; two concepts to make KEMs more secure in real-world protocols. caw.cryptanalysis.funcaw.cryptanalysis.funCAWCryptographic Applications Workshop 100
Miro Haller @mirohaller.bsky.social · 18/03/2025Talk 3 at #CAW in the session on cryptographic constructions: Olga Sanina presents "Results from Analyzing and Refining Bluetooth Secure Connections" about modeling and authenticating Bluetooth. caw.cryptanalysis.funcaw.cryptanalysis.funCAWCryptographic Applications Workshop 100
Miro Haller @mirohaller.bsky.social · 18/03/2025Talk 2 at #CAW in the session on large-scale deployed cryptography: Shai Halevi or Nevine Ebeid (or both) from AWS on "Blockcipher-Based Key Commitment for Nonce-Derived Schemes"; towards the FIPS-compliant deployment of XAES-256-GCM. caw.cryptanalysis.fun 100
Miro Haller @mirohaller.bsky.social · 18/03/2025Talk 1 at #CAW in the session on large-scale deployed cryptography: Ghous Amjad (Google) on the design and deployment of "RSA Blind Signatures with Public Metadata" in GoogleOne VPN. caw.cryptanalysis.fun 100
Miro Haller @mirohaller.bsky.social · 18/03/2025The preliminary program for the Cryptographic Applications Workshop (CAW) at Eurocrypt'25 is out. #CAW focuses on the construction and analysis of cryptography built for practice. This thread gives a quick overview; the full program and abstracts are here: caw.cryptanalysis.fun#program 197
Miro Haller @mirohaller.bsky.social · 31/01/2025By the way, any constructive work submitted to RWC is likely a great fit for CAW too :) 000
Miro Haller @mirohaller.bsky.social · 31/01/2025Did you get your Eurocrypt decision today? And now either know you'll attend and would like to give an extra talk or need a different reason to go to Madrid? Then consider submitting a talk on applied, constructive cryptography to CAW. Our call for talks is open until Feb 7. 100
Miro Haller @mirohaller.bsky.social · 07/01/2025Signing up for the workshop as participants will be over the Eurocrypt conference (eurocrypt.iacr.org/2025) 011
Miro Haller @mirohaller.bsky.social · 07/01/2025Our call for talks is open until February 7. All details are here: caw.cryptanalysis.fun 131
Miro Haller @mirohaller.bsky.social · 07/01/2025The main themes of #CAW are: 1. formalizing the security of deployed cryptography, 2. constructing cryptographic primitives and systems for practice, and 3. the industry perspective on deployment and maintenance of cryptography. 111
Miro Haller @mirohaller.bsky.social · 07/01/2025The 2nd iteration of the Cryptographic Applications Workshop (#CAW) will be at Eurocrypt 2025! #CAW focuses on the construction and analysis of cryptography built for practice, bridging the gap between research and real-world applications. Our call of talks is currently open: caw.cryptanalysis.funcaw.cryptanalysis.funCAWCryptographic Applications Workshop 196