Post-quantum @cloudflare

Nijmegen
Joined November 2006
Bas Westerbaan retweeted
13 years of tinfoil hats for srand48(time(NULL)
13
45
9
1,400
608,563
Bas Westerbaan retweeted
Can you build blind signatures from ML-DSA? Yes of course you can! But what will the performance be? In recent work, we looked at the efficiency of Non-Interactive Zero-Knowledge proofs of knowledge of an ML-DSA signature.
2
9
26
1,345
Bas Westerbaan retweeted
yikes: via HDNL 1 Shor "only" gets to you to decrypt one secure channel session, whereas 1 Shor'd PKI cert or auth cert/token can get you access to a whole network/org (modulo the detection heuristics and other auth factors etc.)
Replying to @exocognosis
First quantum attack is expensive and will not be HNDL. Instead it will target powerful widely trusted access keys. If you only forgot to roll one access key you’re in trouble.
4
6
14
2,080
Indeed. There is a best algorithm to break RSA-2048 that only God knows. It might be classical or quantum. The quantum one is practical. We hope the classical one isn't. AI helps us answer that question faster. AI doesn't break cryptography: it lets us know it was broken faster.
"discrete log is just like a math conjecture, it's a matter of time and tokens" No. AI may optimize the best known algorithms and/or implementations, but if factoring/DL are hard (although not NP-complete, if P!=NP we know such hard "NP-intermediate" exist), then no efficient solver exists, ergo no AI can find one. Most likely P!=NP. < insert caveats about worst/average-case hardness>
4
9
63
4,097
Bas Westerbaan retweeted
This is what I have been telling everyone who will listen. The most valuable thing the frontier labs can now do for crypto (and math more broadly) is publish their *negative* results. What ideas they tried, how much compute they used, and what obstacles they found.
Replying to @matthew_d_green
And specifically for cryptanalysts who are working with models and for the labs: Folks, what we need right now are *negative* results. Silence is the worst thing you could be publishing.
8
35
1
222
10,185
Bas Westerbaan retweeted
new Keccak variant: MiniSHAKE 800-bit permutation (instead of 1600), only 12 rounds (instead of 24), great idea! eprint.iacr.org/2026/2363
2
3
33
1,968
Recursive self-improvement.
thanks to AI assisted math, bought the smallest table that can fit my home cluster of 11 mac minis using AI to do more AI
1
1
24
1,169
No reason to panic yet.
4
5
1
29
2,304
Bas Westerbaan retweeted
Replying to @WatsonLadd
I'm pretty sure that if have AI and even half-competent people using it -- with high likelihood you will find exploitable issues in the "Type A" equivalents of any country. Good news if your intelligence op is a bit short-staffed on the "top-secret cleared math genius" dept..
1
2
231
Is there any degree 2 PRG in between of Goldreich (super sparse) and MQ (super dense)?
2
2
507
OpenSSH 10.6 enables support for post-quantum keys (authentication.) openssh.org/releasenotes.htm…
3
7
32
1,707
Bas Westerbaan retweeted
arxiv.org/abs/2610.03682 shows it takes very little non-locality to get big improvements in the overhead of quantum fault tolerance. If a planar machine is split into pieces, simply changing the piece-to-piece connections can give an order of magnitude improvement in density!
2
15
95
5,639
Bas Westerbaan retweeted
i guess we trainin models now
introducing 𝚌𝚕𝚎𝚏: our first models trained by @cloudflare's workers ai team. today, we're releasing two fast and accurate decision models that top the benchmarks for quality and latency. use them hosted on workers ai or grab the weights from @huggingface, because we open-sourced it too. blog.cloudflare.com/clef-dec…
5
6
2
207
15,662
Bas Westerbaan retweeted
A couple of my favorite images from the post-quantum blogs today:
We’re building CryptoLabe, an internal AI-powered tool that discovers cryptography across our codebase, surfaces dependencies, and helps us progress toward a full post-quantum migration by 2029. Here’s what we’ve learned so far. cfl.re/4jeczqX #BirthdayWeek
2
1
17
989