Dmitry Khovratovich (@Khovr) profile picture

Researcher at Ethereum Foundation Founder of ABDK Consulting

Luxembourg
Joined May 2012
Photo by Dmitry Khovratovich (@Khovr)Photo by Dmitry Khovratovich (@Khovr)Photo by Dmitry Khovratovich (@Khovr)Photo by Dmitry Khovratovich (@Khovr)Photo by Dmitry Khovratovich (@Khovr)Photo by Dmitry Khovratovich (@Khovr)
Dmitry Khovratovich retweeted
Today's update on the security margins of SHA-256, SHA3, and BLAKE3: hashsma.sh/
8
28
5
323
36,614
Dmitry Khovratovich retweeted
ABDK Confy AI is live on Microsoft Marketplace. Chat with your spreadsheet in Excel without your sensitive columns ever reaching the AI provider. It’s free and runs on your own API key. 🧵
3
1
3
704
Dmitry Khovratovich retweeted
Ethereum is transitioning to Post-Quantum proof systems like leanVM and Flock. This removes the strict requirement for arithmetic-friendly hashes (like Poseidon) and reopens a critical debate well analyzed by @Khovr: Which hash function should secure Ethereum’s future? 🧵👇
3
11
64
3,015
Dmitry Khovratovich retweeted
Will quantum hackers get to Satoshi Nakamoto's dormant wallets holding billions, and is it true that new, strict security algorithms will permanently kill cheap transactions? Together with cryptographer and @ethereumfndn researcher @Khovr, we explore whether this panic is justified and what to do with your wallets right now to avoid losing your assets. youtube.com/watch?v=2aUq9V1E…
1
1
467
Who suggested limiting eprint downloads? This is super annoying. In the era of automated tools, the necessity to download all papers manually, and just a few per day -- is super inconvenient. Is there some storage/bandwidth expense issue? Ready to sponsor #iacr for it.
6
1
41
5,475
Dmitry Khovratovich retweeted
Quantum computers (if and when they do in fact get powerful enough) would break Ethereum’s BLS signatures, so what can be done now to mitigate? For the second instalment of the @leanEthereum miniseries. Nico sat down with Benedikt Wagner and Dmitry Khovratovich (@Khovr) from the @ethereumfndn We unpack leanSig, a hash-based multi-signature scheme designed to replace BLS in a post-quantum world. Listen to the full episode here on X. —--------- TIMECODES 3:22 Post-quantum signatures 3:35 Why replace BLS 4:45 Hash-based signatures (LeanSig design) 9:12 Size vs performance trade-off 11:31 SNARK-based aggregation 12:37 Circuit constraints & encoding 17:33 Aborting Random Oracle 19:47 Signature size & tight security 22:26 Random Oracle vs Standard Model 25:23 Poseidon hash function 28:24 Poseidon Initiative 31:06 Billion-Dollar Merkle Tree
5
14
5
49
8,374
Dmitry Khovratovich retweeted
Скоро будет 24 февраля — 4 года полномасштабного вторжения в Украину. Я считаю, что лучше оставить тот день для полной поддержки украинцев. Украине нужно много помощи — чтобы продолжать защищаться и чтобы минимизировать человеческие страдания от атак на жилые дома, энергосистему и т. д. Сегодня выскажу своё мнение с точки зрения будущего России. Я смотрю на эту ситуацию частично с внутренней и частично с внешней перспективы. Я родился в России, моя семья вся русская, но вырос я в Канаде. Политическую ситуацию я всё время наблюдал. В 2017 году даже послал Навальному один биткоин, но сильно вовлечён не был. Я слежу за ситуацией через интернет, как все. И у меня есть свои политические инстинкты после 15 лет в крипте и всякой борьбы в Твиттере (Иксе?). У каждого есть право меня слушать или не слушать — как хотите. Здесь напишу две части: 1. Почему я поддерживаю Украину и говорю, что эта война — преступная агрессия, а не «сложная ситуация, где обе стороны вели себя грязно», как говорят некоторые? 2. Про будущее: сегодняшний «тупик», идея «мира с народом России», и на основе каких идей может быть создано более положительное будущее России, и правильная роль идей «децентрализации», «цифровой демократии» и.т.д.
822
662
150
5,423
566,397
Ethereum Foundation is releasing detailed requirements for the zkVM architecture whitepaper -- a document to be delivered over three milestones. Modern zkVMs aren't monolithic circuits. They are composed of many moving parts: segmentation, buses, memory, recursion. Each component may be sound on its own, but system-level security depends on how they fit together. The whitepaper should cover not only the architecture details but also the security argument behind the recursive proof structure. We expect the final versions to be ready in December 2026 along with the zkVM proofs being <300 KB long at the 128-bit provable security level.
11
27
4
137
10,152
Our company is launching a new service: audits of AI !
🚀 NEW SERVICE: AI & LLM Security Audits abdk.consulting/ai-llm-secur… Protect your AI applications from emerging threats with ABDK Consulting's expert security audits.​ ✅ 20+ years of security experience ✅ 300+ successful projects completed​ ✅ Expertise in AI & ML security
3
5
1,042
Dmitry Khovratovich retweeted
Today marks an inflection in the Ethereum Foundation's long-term quantum strategy. We've formed a new Post Quantum (PQ) team, led by the brilliant Thomas Coratger (@tcoratger). Joining him is Emile, one of the world-class talents behind leanVM. leanVM is the cryptographic cornerstone of our entire post-quantum strategy. After years of quiet R&D, EF management has officially declared PQ security a top strategic priority. Our journey began in 2019, with the "Eth3.0 Quantum Security" presentation at StarkWare Sessions. Since 2024, PQ has been central to the @leanEthereum vision. The pace of PQ engineering breakthroughs since then has been nothing short of phenomenal. It's now 2026, timelines are accelerating. Time to go full PQ: → PQ ACD: Antonio Sanso (@asanso) kicks off a bi-weekly All Core Devs PQ transactions breakout call next month. These sessions focus on user-facing security, covering dedicated precompiles, account abstraction, and longer-term transaction signature aggregation with leanVM. → PQ foundations: Today we are announcing a $1M Poseidon Prize to harden the Poseidon hash function. We are betting big on hash-based cryptography to enjoy the strongest and leanest cryptographic foundations. Check out our other $1M PQ initiative, the Proximity Prize. → PQ devnets: Multi-client PQ consensus devnets are live! Shoutout to pioneers @zeamETH, @ReamLabs, @PierTwo_com, @geanclient, @ethlambda_lean, as well as established consensus teams Lighthouse, Grandine, and soon Prysm. This incredible teamwork is coordinated by @corcoranwill via weekly PQ interop calls. → PQ workshops: Building on last year's PQ workshop in Cambridge (see photo), the EF is hosting another 3-day PQ event in October. Top experts from around the world will convene. In addition, a PQ day is set for March 29 in Cannes just ahead of EthCC. → PQ FV and AI: Last week Alex Hicks (@alexanderlhicks) ran a specialised maths AI for 8 hours, at a $200 cost. It one-shotted a formal proof one of the hardest lemmas in the foundations of hash-based snarks. Mind-blowing. Applied cryptography will never be the same. → PQ roadmap: A comprehensive breakdown of the EF's proposed PQ strategy will be shared soon™ on pq[.]ethereum[.]org. The roadmap targets a full transition in coming years with zero loss of funds and zero downtime. Stay tuned :) → PQ education: The ZKPodcast (@zeroknowledgefm) is producing a 6-part video series on Ethereum's PQ strategy. EF Enterprise Acceleration is also preparing material for enterprises and nation-states. Finally, Ethereum is now represented on the PQ advisory board that Coinbase announced yesterday. Believe in something. Believe in PQ security.
335
741
289
3,225
1,224,477
Dmitry Khovratovich retweeted
zkEVMs crushed the 2025 boss: real-time proving ✅ 2026 boss: 128-bit provable security👾 New blog post on the next level for Ethereum zkEVMs: three milestones, paving the path to mainnet-grade L1 zkEVMs. blog.ethereum.org/2025/12/18… Game on.
150
165
20
633
124,088
Dmitry Khovratovich retweeted
Craaazy 365 days of @leanEthereum progress. Cheers to the builders. Cheers to the dreamers. Cheers to anti-fragility, too :) Devcon, Bangkok — Nov 12, 2024. The suspense is real. The room overflows; hundreds can't get in. An "announcement of an announcement" had sparked wild speculation about my "most ambitious initiative". Who knew the beam chain vision would evolve into lean Ethereum? Next-level ambition, seeping into all layers of L1. Snarks for consensus and execution. Fort mode and beast mode. What's new? zkEVMs. Real-time proving. Full validation in a tab, on a phone. Let's pump L1 gas with the exponential snark curve. Starting in months, not years. To me it all points to 10K TPS, the gigagas frontier. Dream bigger dreams for L1. Believe in something. ——— part 1—lean consensus devnets → clients: 4 new lean CL clients (Zeam, Ream, Qlean, Lantern) → languages: 3 new CL languages (Zig, C++, C) → specs: by @tcoratger + 14 others; 3SF-mini subspec by @vitalikbuterin → testing: revamped test framework by @fselmo2; @Sib_Katya metrics → devnets: multi-client 3SF with 4s slots and 12s finality; PQ soon™ coordination → hires: EF Protocol coordinators @corcoranwill and @ladislaus0x → CL teams: led by @Gajpower, @unnawut, @kamil_abiy, @mstore80 → 7 consensus calls: teams, PQ, p2p, exit queue, APS, 3SF, PQ specs → Cannes workshop: 1 day at EthCC in June; interop kicked off → 13 interop calls: by @corcoranwill on Wednesdays at 2pm UTC → Cambridge Oct workshops: 1 day leanVM, 3 days PQ, 3 days CL cryptography → leanSig: 3 papers on hash sigs by Benedikt, @khovr, @kudinov_mikhail → leanVM: fast minimal aggregation zkVM by Emile → WHIR: fast Plonky3 implementation by @tcoratger → optimisoors: @AngusGruen, @GiacomoFenzi, @lambdaclass, @kiliconu → Poseidon2: 4 cryptanalysis workshops by @khovr, @asanso → maths: $1M Millennium-like proximity prize; papers flowing → formal verification: ArkLib by @QuangVDao research → consensus team: hires @yannvon and lead @robsaltini join @luca_zanolini → faster finality: 1- or 2-round designs with Ethereum-grade liveness → 3sf-gold: new fast inclusion by @fradamt, @vitalikbuterin from Cambridge → p2p: @qdrvm_io simulator; @raulvk ethp2p; @soispoke leanp2p → rainbow staking: new Cambridge ideas; specs by Dan Goron & Alex Vlad ——— part 2—lean execution zkEVM tech → real-time proving: ~100 engineers pushing across ~10 zkVM teams → GPU proving: 16 5090s (10kW) proving mainnet; $0.01/block → guests: revm (Reth), levm (Ethrex), evmone (Zilkworm), ZKSync OS → more guest programs: Geth, Besu, Nethermind and others soon™ → RISC-V: de facto ISA of choice for zkEVM proving → Picus: prolific Veridise tool to identify under-constraints → formal verification: $4M across 40 grants by @alexanderlhicks Ethproofs community → zkVM integrations: Airbender, OpenVM, Pico, R0VM, SP1, Ziren, ZisK → other integrations: Cysic, Fermah, Marlin, Snarkify, Zilkworm, ZkCloud → website: driven by @fbwoolf under new EF Ethproofs team → 7 calls: zkVMs, RTP, gigagas, RISC-V, native rollups, proximity gaps → Ethproofs day: Nov 22 at Devconnect; register at ethproofs[.]day → zkAttester demo: my home validator on zkEVM proofs at Ethproofs day EF zkEVM team → new team: led by @kevaundray with Cody, Han, Ignacio, Radek, Sophia → EF blog post: real-time proving requirements by @_sophiagold_ → zkLighthouse: modified Lighthouse client by @kevaundray → zkEVM/acc: @ignaciohagopian benchmarks; @codytouchgrass tests → more zkEVM/acc: @kevaundray standardisation; Ere by @han__0110 future of EL → Fusaka: per-tx gas limit (EIP 7825); MODEXP killer (EIPs 7823, 7883) → EVM 2.0: @vitalikbuterin proposal to enshrine RISC-V under the EVM → native rollups: championed by @lucadonnoh; wrote book and draft EIP → gas auto-pumps: 3x/year gas pumps (EIP-7938 by @dankrad) → gigagas L1: champion wanted—reach out :) gigagas@ethereum.org
111
202
37
1,039
213,762
Dmitry Khovratovich retweeted
(1/10) I'm super happy to see Poseidon2b comes out of the ground. A new hash function optimized for binary field zk proving systems like Binius. It adapts the battle-tested Poseidon2 design for a new class of efficient verifiable computation protocols. 🧵
3
5
1
62
5,678
Dmitry Khovratovich retweeted
Dive into Poseidon! A full-day workshop on cryptanalysis + open problems in algebraic hash functions. Participate, share ideas, shape the research. 📍 Luxembourg | 🗓 23 Oct 2025 | 🕒 9:30–17:30 | 🏨 Hotel Meliá Link 👇
2
6
2
30
3,196
Our joint work with Benedikt Wagner and Mikhail Vladimirov can help the applications that struggle with long public input of a SNARK
This new paper on using a different hash in circuit and in contract looks very interesting eprint.iacr.org/2025/1500.pd…
1
17
1,701
Dmitry Khovratovich retweeted
An attack on a fundamental proof technique reveals a glaring security issue for blockchains and other digital encryption schemes. Erica Klarreich reports: quantamagazine.org/computer-…
1
46
9
152
51,726
Dmitry Khovratovich retweeted
StarkWare/Starknet @StarkWareLtd has launched S-two, a high-speed ZK prover designed for use on everyday devices. Benchmarks show it dramatically outperforms existing zkVMs in speed and efficiency across various tasks like SHA3 and matrix multiplication. Already integrated with projects like @NexusLabs, @KakarotZkEvm, @Trade_VEX and @gizatechxyz for major performance boosts, S-two enables real-time, client-side proving for privacy, identity, and AI use cases: xitter.cf/StarkWareLtd/status/19… Following this, StarkWare released new performance benchmarks revealing just how far S-two leads in proving speed. It handles SHA3 chains up to 166x faster than @RiscZero and computes Fibonacci sequences and matrix operations significantly faster than other zkVMs. Fully open-source from day one, S-two is now the fastest option available for client-side proving in crypto, AI, and real-time identity applications: xitter.cf/StarkWareLtd/status/19… @Starknet will launch STRK Staking v2 on Mainnet on June 17, introducing block attestation and time-locked commission adjustments for validators. The upgrade aims to ensure validator activity and transparency, affecting delegator rewards. Validators must commit to maximum commission rates in advance. Migration from v1 will briefly pause staking contracts, but no action is needed from delegators unless switching validators post-upgrade based on new liveness data: xitter.cf/Starknet/status/193250… The project has also significantly reduced gas fees - now over 500 times cheaper than @ethereum L1. The network reports enhanced cost efficiency and user experience, positioning Starknet as fully prepared to support a wide range of apps: xitter.cf/Starknet/status/192484… Finally, StarkWare featured at the concluded House of ZK’s @eth_proofs Summit. Product Manager, @MayaD09111862, participated in two panels: 1) Along with @asn_d6 of @ethereumfndn, @sd_eigen of @ProjectZKM, @alexand_belling of @LineaBuild and @portport255 of @the_matter_labs & @zksync, Maya discussed zkVM design and proof system tradeoffs: youtube.com/watch?v=mptsIy6M… 2) Maya later joined @Khovr of @ethereumfndn, @NorbertVadas of @thezkcloud, @0xAlecJames of @NexusLabs and @alicelingl of @HouseofZK to explore the challenges and trade-offs in benchmarking ZK systems across different hardware setups, application needs, and security considerations: youtube.com/watch?v=zTagHgMy…
Once upon a time on Starknet: painful gas fees. ~1 year of optimizations later, gas fees are destroyed, and Starknet is now over 500x cheaper than Ethereum L1. From cost to UX, everything’s aligned, and Starknet is fully ready for whatever you have in mind.
1
1
1
7
967
Dmitry Khovratovich retweeted
🔹@Khovr, Researcher at @ethereumfndn Dmitry Khovratovich, a cryptography researcher at the Ethereum Foundation, is a ZK security expert. His perspective on benchmarking in the verification standards panel will guide developers ensuring robust proof systems 🤝 🗓 June 10th 📍 House of Music, Berlin 🎟️ lu.ma/hozkethproofs
1
2
10
823
The deadline for Short Term #Poseidon Grants has been extended to 15th March 2025 poseidon-initiative.info/#h.… All researchers from the academia #iacr and the industry are welcome to apply!
8
23
16
165
419,224