Nothing digital is true Backup: https://xitter.cf/t.co/soUr4msIbD

Luxembourg
Joined July 2014
Alex Biryukov retweeted
Ethereum is transitioning to Post-Quantum proof systems like leanVM and Flock. This removes the strict requirement for arithmetic-friendly hashes (like Poseidon) and reopens a critical debate well analyzed by @Khovr: Which hash function should secure Ethereum’s future? 🧵👇
3
11
64
3,002
We shouldn't construct a benevolent god because putting an invertor in front of it is very cheap.
1
85
Flock/Binius simplifies the hash assumption but uses very recent, less mature proof-system engineering?
Goodbye, Poseidon! An epic 8-year, 8-figure rabbit hole in post-quantum cryptography reaches its dream conclusion. The Ethereum Foundation is abandoning Poseidon for L1, pivoting to SHA or BLAKE. This milestone unlocks ultimate security for lean Ethereum and foreshadows a golden era of hash-based cryptography. Since 2018, the Ethereum Foundation has invested in magic cryptographic bricks, so-called "SNARK-friendly hashes". In 2019, Poseidon was born. It held strong and became the dominant SNARK-friendly hash, securing billions via zkrollups and zkVMs. In a stunning reversal, breakthrough SNARK designs show that SNARK-friendly hashes aren't necessary after all. Off-the-shelf traditional hash functions like SHA2 and BLAKE2s can now match Poseidon in a SNARK. In hindsight the key was not SNARK-friendly hashes, but hash-friendly SNARKs. The secret is doing maths over the smallest prime number: 2. So-called "binary fields" natively speak the language of bits, aligning with the boolean operations inside traditional hashes. This is a stark departure from "prime fields", where awkward large-prime arithmetic makes bit manipulation painfully expensive. We're talking sci-fi cryptography. 1M traditional hash calls proven per second, on a laptop. Just 100x overhead vs native CPU boolean compute. Nobody predicted such performance, not even the handful of binary-field visionaries. Hat tip to the research geniuses: Jim and Ben with Binius in 2023; Ron, Benedikt and William with Flock in June. With SHA2, the lean aesthetic of minimal assumptions reaches its climax. The EF's principled stance on pure hash-based cryptography has aged like fine wine. We now enjoy foundations the world can trust for decades and centuries, foundations worthy of the dream of an internet of value. Speed of deployment is a secondary win. There's no longer a need to wait years for Poseidon cryptanalysis to bake. Emile and Thomas from the EF post-quantum team are moving at breakneck speed with binary fields. The strawmap now points to a production-grade leanVM in 2027, with CL, DL, EL deployments in 2028. As AI becomes exceptional at cryptanalysis, the contrarian bet to avoid riskier structures like lattices and isogenies is visibly paying off. The past weeks have been brutal. Lattice-based "HAWK" and isogeny-based "SQIsign", both signature schemes in NIST's Round 3, have suffered blows. Sources I trust say more blood is coming. On AI, the open autoresearch trend kicked off by ECDSA[.]fail is spreading fast, with amazing outcomes from zk[.]golf and SNARK[.]fast. Days ago SNARK[.]fast crossed 1.8M BLAKE3/sec proven on an M3 Max. Stay tuned for fresh autoresearch challenges dropping tomorrow. Also tomorrow: Ethproofs call #10, dedicated to binary fields. Possibly the most noteworthy Ethproofs call yet. Experts leading the charge will present the future of hash-based SNARKs at 2pm UTC. What an incredible time to be alive. To witness history, DM me for a calendar invite :) Today I can confidently claim that hash-based cryptography has won out for blockchain post-quantum signatures. SNARK succinctness compresses arbitrarily many signatures into one small proof per block. SNARK flexibility yields k-of-n threshold signatures, complex multisigs, and more. Ultimate security. Uncompromising performance. Full programmability. Believe in something. Believe in hashes.
4
565
Quasipolynomial Cryptanalysis of the McEliece
1
437
We have received the Test of Time award at Euro S&P for Argon2. It was published at the first IEEE Euro S&P ten years ago.
1
8
213
We are hiring for PhD and postdoc postions in symmetric cryptography.
2
148
Magic Pot: Cryptanalysis of full AIM2 in the standard and related-/reused-key settings using new elimination framework (Alex Biryukov, Pablo García Fernández, Aleksei Udovenko ) ia.cr/2026/903
1
139
Algorithmic Toolkit for Linearization of S-boxes (Alex Biryukov, Philip Tureček, Aleksei Udovenko) ia.cr/2026/913
79
Alex Biryukov retweeted
With this lineup of speakers, this promises to be very interesting.
The Future of Mathematics Symposium is being held on May 1st-2nd! We have a truly exceptional group of speakers, with multiple Fields Medalists including Terence Tao. Tune in for livestream 9am-5pm PST (link below)
6
58
1
574
93,432
Alex Biryukov retweeted
#WorldPoetryDay📜 Central medallion of the Vichten Mosaic depicting Calliope, the Muse of heroic or epic poetry, and Homer. Dated to around AD 240. National Museum of History and Art, Luxembourg.
5
55
1
274
6,236
Alex Biryukov retweeted
13/ A key point: for years to come, bugs and implementation attacks (side-channels, fault injection) will be larger risks than CRQCs. This applies to SNARKs, signature aggregation schemes, and even signatures themselves. Invest in audits, fuzzing, and formal methods.
1
4
27
3,754
Fantomasking scheme
1
168
Fear always sells well.
3
125
Stumbled upon some interesting stuff about FSE/ToSC: portal.core.edu.au/conf-rank… Actually came to check the ranking of something else: WCC (Workshop on Coding and Cryptography), but I didn't find it. Help would be appreciated.
1
1
183
Found it until CORE 2020, Ranking B. Something weird happens with this workshop's DBLP.
1
1
138
I guess this is right when aimed at own personal development, however when aimed externally beware of "idiots with initiative".
Agency > Intelligence I had this intuitively wrong for decades, I think due to a pervasive cultural veneration of intelligence, various entertainment/media, obsession with IQ etc. Agency is significantly more powerful and significantly more scarce. Are you hiring for agency? Are we educating for agency? Are you acting as if you had 10X agency? Grok explanation is ~close: “Agency, as a personality trait, refers to an individual's capacity to take initiative, make decisions, and exert control over their actions and environment. It’s about being proactive rather than reactive—someone with high agency doesn’t just let life happen to them; they shape it. Think of it as a blend of self-efficacy, determination, and a sense of ownership over one’s path. People with strong agency tend to set goals and pursue them with confidence, even in the face of obstacles. They’re the type to say, “I’ll figure it out,” and then actually do it. On the flip side, someone low in agency might feel more like a passenger in their own life, waiting for external forces—like luck, other people, or circumstances—to dictate what happens next. It’s not quite the same as assertiveness or ambition, though it can overlap. Agency is quieter, more internal—it’s the belief that you *can* act, paired with the will to follow through. Psychologists often tie it to concepts like locus of control: high-agency folks lean toward an internal locus, feeling they steer their fate, while low-agency folks might lean external, seeing life as something that happens *to* them.”
2
185
I am wondering why PQCrypto is not in here or in Google's security conference ranking list: jianying.space/conference-ra…
2
104
1/n I’m really excited to share that our @OpenAI reasoning system got a perfect score of 12/12 during the 2025 ICPC World Finals, the premier collegiate programming competition where top university teams from around the world solve complex algorithmic problems. This would have placed it first among all human participants. 🥇🥇
138
432
248
2,748
2,468,967
"It was a special performance just for this publication, because he (the dog) understands the importance of evidence-based science."
Quantum factoring paper of the year: eprint.iacr.org/2025/1237
1
209