Cryptography Tip retweeted
Graph of what papers report for costs of attacks against ChaCha6 and ChaCha7. ChaCha8 is untouched so far, but, as always, my recommendation is to use 20 rounds except when speed constraints force usage of 12 or 8. Graph comes from my latest McEliece talk: cr.yp.to/talks.html#2025.03.…
Cryptography Tip retweeted
For the people who've asked whether my next computer-checked-proof projects would be in HOL Light or in Lean after I did both for cr.yp.to/papers.html#goppade… (see cr.yp.to/papers.html#pwccp for notes on procedures): cr.yp.to/2024/transcendence-… is a proof of transcendence of pi in HOL Light.
Cryptography Tip retweeted
Passwords have problems, but passkeys have more
world.hey.com/dhh/passwords-…
Cryptography Tip retweeted
Happy 107th birthday Navajo Code Talker John Kinsel, Sr. Thank you for your service. ❤️🎂🎖️🇺🇲
Cryptography Tip retweeted
Zero-knowledge proofs (ZKPs) offer intriguing possibilities for AI agents. These cryptographic protocols enable one party to prove to another that a statement is true without revealing any additional information. While humans and AI can both utilize ZKPs in traditional applications, such as secure authentication and privacy-preserving computations, there are unique and novel ways in which AI agents could leverage ZKPs to perform functions that are unattainable for humans, even with ZKPs.
One such application lies in the realm of autonomous decision-making and cooperation among AI agents across different organizations or domains. AI agents can be programmed to optimize and make decisions based on vast datasets that often contain sensitive information. In many scenarios, these agents need to collaborate and share insights without exposing the underlying data, which is where ZKPs come into play. For instance, consider AI agents from different financial institutions that need to cooperate to detect fraud patterns without sharing customer data. A ZKP allows these agents to prove the occurrence of certain patterns or anomalies in their data without revealing the data itself. This capability goes beyond human capacity because it requires handling and computing vast and complex datasets at speeds and scales that humans cannot manage.
AI agents can employ ZKPs to validate the integrity and provenance of data in decentralized environments. In blockchain systems, for example, AI can analyze and verify transaction histories without exposing the actual transactions, thus preserving privacy while ensuring trust. This is particularly important in scenarios where the verification process itself involves complex computations and a deep understanding of the data, something that LLMs excel at. While a human might be able to understand and work with ZKPs to some extent, they lack the computational power and efficiency to process and validate large-scale data autonomously and in real time as AI agents can.
AI agents using ZKPs can enhance security and privacy in sensitive negotiations and competitive environments. Imagine AI-driven negotiators representing different companies in a merger or trade deal. These agents can use ZKPs to prove the validity of their claims or assets without disclosing their detailed financial statements or proprietary strategies. This ensures that negotiations can proceed with mutual trust while maintaining the confidentiality of sensitive information. Humans in such scenarios would struggle to perform at the same level, as they would require extensive manual verification processes that are both time-consuming and prone to error.
Cryptography Tip retweeted
Telegram has launched a pretty intense campaign to malign Signal as insecure, with assistance from Elon Musk. The goal seems to be to get activists to switch away from encrypted Signal to mostly-unencrypted Telegram. I want to talk about this a bit. 1/
Cryptography Tip retweeted
A painting based on text input to the sha256 algorithm.
From the phrase "Voter Registration" (no quotes).
Enter your text at bottom of page.
#sha256
algorithmicjazz.com/p5js/sha…
Cryptography Tip retweeted
"Cryptography is the killer app for computation complexity. Most computer scientists are rooting for problems to be easy. Cryptographers are the only ones rooting for problems to be hard." -- Russell Impagliazzo in @QuantaMagazine's new video: youtu.be/RjzSFa03i2U?feature…
Cryptography Tip retweeted
One of many papers in the first issue of the new IACR Communications in Cryptology is my survey "Understanding binary-Goppa decoding": cr.yp.to/papers.html#goppade… First 20 pages are a minicourse on the decoder used for McEliece. Appendices cover tests and formally verified proofs.
Cryptography Tip retweeted
After a long slog, by many, many people, the first issue of the Communications on Cryptology is out.
This is a new Diamond Open Access (free to publish, free to view) journal from the IACR.
cic.iacr.org/i/1/1
Cryptography Tip retweeted
Type of founder who distributes one-time pads to all new hires, with a wink and a smile. “You know, just in case.”
Cryptography Tip retweeted
A thing I worry about in the (academic) privacy field is that our work isn’t really improving privacy globally. If anything it would be more accurate to say we’re finding ways to encourage the collection and synthesis of more data, by applying a thin veneer of local “privacy.”
Cryptography Tip retweeted
The first rule of data club is: nobody ever deletes data.
Replying to @joetidy
Very interesting - NCA says that whilst searching through seized servers of LockBit they found data belonging to some victims who had already paid the gang's ransom. So - more evidence that paying these criminals does not mean that your data is deleted as they promise.
Cryptography Tip retweeted
For those wondering, Signal's statement (and celebration!) of Apple's joining the post-quantum messaging party can be found here:
mastodon.world/@Mer__edith/1…
Cryptography Tip retweeted
So Apple has gone and updated the iMessage protocol to incorporate both forward security (very good!) and post-quantum cryptography. security.apple.com/blog/imes…
Cryptography Tip retweeted
New blog post "Double encryption: Analyzing the NSA/GCHQ arguments against hybrids." blog.cr.yp.to/20240102-hybri… blog-cr-yp-to.viacache.net/2… #nsa #quantification #risks #complexity #costs



















