Somewhere
Joined March 2010
- Tweets280
- Following408
- Followers2.9K
- Likes4.5K
bsky.affine.group retweeted
he did the meme
I don't know how to feel about being basically the CVE issuing authority for Chinese PQC suddenly🙃 (The "tracker" here is my web site.) Ok, I guess, as long as I am cited? From: eprint.iacr.org/2026/2390
bsky.affine.group retweeted
How often do ArXiv papers contain errors in the main theorems they claim to prove? Using GPT-6.1 Sol to identify such mistakes, it finds:
- 6% of papers before 08/2026 contain main theorems that are false.
- Only 1.5% contain similar mistakes in the last two months.
bsky.affine.group retweeted
The most outrageous conjecture!
gilkalai.wordpress.com/2026/…
bsky.affine.group retweeted
I looked forward to this cleanup! Nikloai Chukhin (eccc.weizmann.ac.il/report/2…) significantly cleans and extends the OpenAI 2^(ω(sqrt(n))) lower bound for depth-3 circuits:
The (4n-1)-bit function sum_ij a_{i+j}x_iy_j mod 2 needs depth-d circuits of size 2^(Ω~(n log n)^{1/(d-1)}).
bsky.affine.group retweeted
I'm very happy to announce that our new paper "Reverse-Bleichenbacher:
Bleichenbacher Attacks are Practical Again" is now on ePrint and has been accepted at NDSS 2027! 🎉
eprint.iacr.org/2026/2414
bsky.affine.group retweeted
I'm glad to share that our book on zero-knowledge protocols now has a full chapter on post-quantum zero-knowledge proving systems with over 100 pages!
It covers lattice-based Σ-protocols, LaBRADOR, and ZK-STARKs, with all the necessary prerequisites included.
Link below 👇
bsky.affine.group retweeted
In case people did not see the results, the outcome from the recent IACR poll is up at iacr.org/surveyresults/merge…
bsky.affine.group retweeted
I've been working on a tool to help humans write and understand game-hopping security proofs. It's just for "pen-and-paper" reasoning, not a formal verification tool. 1/3
bsky.affine.group retweeted
🧵
We updated ePrint 2026/1692 with new results on Poseidon: eprint.iacr.org/2026/1692
The paper introduces a new approach to round skipping which we denote (k+1)-wise collapsing and which enables round skipping in arbitrary CICO-k problems beyond CICO-1 and CICO-2.
1/6
tl;dr: we present an interpolation attack on 28 out of 31 rounds of Poseidon in practical time via a novel technique for partial round skipping; see ia.cr/2026/1692. 🧵⬇
bsky.affine.group retweeted
The optimality of the packing for 11 squares has been formalized in lean thanks to Astra and Claude! Huge thanks to @ojoshe, @kleddamag, @wand_125, @guzhou0806, and @ctjlewis for aiding in the process.
Image credit: jlevy.github.io/squares/case…
1/n
bsky.affine.group retweeted
The Alon-Yuster-Zwick color coding trick can be used to get 2^{O(sqrt(n))} size depth-3 AC circuits for every symmetric Boolean function!! arxiv.org/pdf/2609.34029
Just the latest exhibit that "circuit lower bounds are hard to prove because they are false"
bsky.affine.group retweeted
ICLR 2027 has received more submissions than all previous years (2013–2026) combined
bsky.affine.group retweeted
I asked Claude if it had a message for a public:
“The credit belongs first to the people who built the number field sieve and CADO-NFS over several decades, and to the teams who set the earlier records. This run used their algorithm and much of their code.”
bsky.affine.group retweeted
Even though the Chinese R1 candidates are not available, the names are: list.niccs.org.cn/archives/l…
Seeing (guessing):
- 34 Signature schemes
- 41 KEMs
- 9 Key Exchange
- 35 Hash
(block ciphers later)
bsky.affine.group retweeted
ACNS'27 is open for submission, 1st cycle deadline: 24 Sept AoE.
acns2027.isg.rhul.ac.uk/
Well-established conference, outstanding organizing team, pretigious awards, attractive venue.
See you at RHUL in 2027, and celebrate the 25th anniversary of ACNS.
bsky.affine.group retweeted
LibFWHT: From Exact Walsh Spectra to Key Dependence in Differential-Linear Correlations
ia.cr/2026/1997
bsky.affine.group retweeted
I agree, P/NP seems unlikely to be resolved soon. There's been essentially zero direct progress on P!=NP, so there's not much for an advanced model (or 10k parallel advanced models) to work with unless P=NP. But I could see L/NP, BPP/NEXP, P/PSPACE, etc falling not long from now
