Eyal Ronen
LightNews LightNews
banner
eyalr0.bsky.social
Eyal Ronen
@eyalr0.bsky.social
160 followers 130 following 5 posts
Researching applied cryptography and security. School of Computer Science at Tel Aviv University.
https://eyalro.net
Posts Replies Media Videos
Reposted by Eyal Ronen
signal.org
Until now, if you lost or broke your phone, your Signal message history was *gone,* a real challenge for everyone whose most important conversations happen in Signal. So, with careful design and development, we’re rolling out opt-in secure backups.

signal.org/blog/introducing-secure-backups
Introducing Signal Secure Backups
In the past, if you broke or lost your phone, your Signal message history was gone. This has been a challenge for people whose most important conversations happen on Signal. Think family photos, sweet...
signal.org
September 8, 2025 at 4:03 PM
Reposted by Eyal Ronen
matthewdgreen.bsky.social
This battle will keep playing out over and over again until they achieve something that their own citizens have made it clear they don’t want. www.techradar.com/vpn/vpn-priv...
The EU wants to decrypt your private data by 2030
The EU Commission unveiled the first step in its security strategy to ensure "lawful and effective" law enforcement access to data
www.techradar.com
July 5, 2025 at 5:39 PM
Reposted by Eyal Ronen
dfaranha.bsky.social
Well, this horrible idea refuses to die so we should refuse to let it pass and start organizing again.

ec.europa.eu/commission/p...
Commission presents Roadmap for effective and lawful access to data for law enforcement
The European Commission presented today a Roadmap setting out the way forward to ensure law enforcement authorities in the EU have effective and lawful access to data.
ec.europa.eu
July 5, 2025 at 5:25 PM
eyalr0.bsky.social
If any Iron Maiden fans are in the Birmingham area tomorrow (the 21st), I have a couple of Premier Lounge tickets that I unfortunately can't use due to the current situation.
#IronMaiden #RunForYourLivesWorldTour #IronMaiden50
@ironmaiden.bsky.social
June 20, 2025 at 7:57 AM
Reposted by Eyal Ronen
malb.bsky.social
New blog post on our (with @rikkebjerg.bsky.social and @mikaelabrough.bsky.social) USENIX'25 paper "On the Virtues of Information Security in the UK Climate Movement" where I end up reflecting on writing this, for me, unusual work.

martinralbrecht.wordpress.com/2025/06/14/o...
On the Virtues of Information Security in the UK Climate Movement
Our paper – titled “On the Virtues of Information Security in the UK Climate Movement” – was accepted at USENIX Security’25. Here’s the abstract: We report on an ethnographic study with members of …
martinralbrecht.wordpress.com
June 14, 2025 at 2:27 PM
eyalr0.bsky.social
After a long debate about whether this small typo was worth resubmitting the PDF or not, @IEEESSP 's server stopped responding one minute before the deadline and solved it for us.
June 6, 2025 at 12:17 PM
Reposted by Eyal Ronen
vanhoefm.bsky.social
All papers should publish their code. Help realize this by becoming an artifact reviewer at NDSS'26, apply here: docs.google.com/forms/d/e/1F...

You'll review artifacts of accepted papers. We especially encourage junior/senior PhD students & PostDocs to help. Distinguished reviews will get awards!
Self-nomination for the Artifact Evaluation Committee of NDSS 2026
We are looking for members of the Artifact Evaluation Committee (AEC) of NDSS 2026. The Network and Distributed System Security symposium adopts an Artifact Evaluation (AE) process allowing authors t...
docs.google.com
May 25, 2025 at 1:25 PM
Reposted by Eyal Ronen
uasc.cc
uASC 2026 will take place on February 3, 2026, in Leuven, Belgium, hosted by KU Leuven. We can't wait to see you next year!

Cycle 1 Paper Submission Deadline is July 15, 2025!
👉 uasc.cc #uasc26
May 19, 2025 at 3:58 PM
Reposted by Eyal Ronen
vanhoefm.bsky.social
New version of the IEEE 802.11 standard that underpins Wi-Fi was has been released. A total of 5969 pages!

The number of pages clearly keeps increasing. That includes more features to defend networks, but also more features to potentially abuse 👀
May 7, 2025 at 10:28 PM
Reposted by Eyal Ronen
arxiv-cs-cr.bsky.social
Bradley Morgan, Gal Horowitz, Sioli O'Connell, Stephan van Schaik, Chitchanok Chuengsatiansup, Daniel Genkin, Olaf Maennel, Paul Montague, Eyal Ronen, Yuval Yarom
Slice+Slice Baby: Generating Last-Level Cache Eviction Sets in the Blink of an Eye
https://arxiv.org/abs/2504.11208
April 16, 2025 at 4:09 AM
Reposted by Eyal Ronen
smartcryptology.bsky.social
Congratulations to the new IACR fellows....

Joan Daemen,
Thomas Johansson,
Anna Lysyanskaya,
Pascal Paillier,
J.R. Rao,
Alon Rosen,
Elaine Shi,
Bo-Yin Yang.

iacr.org/fellows/

#cryptography
IACR Fellows
iacr.org
April 14, 2025 at 6:16 PM
Reposted by Eyal Ronen
yaelwrites.com
Taking this trans day of visibility as a moment to say I am loudly and unapologetically in support of trans rights. 🏳️‍⚧️
March 31, 2025 at 5:04 PM
Reposted by Eyal Ronen
fastly.com
If you’re a FOSS project dealing with overwhelming AI scraper bots, we will provide free security services for your project at no cost to you ❤️ #TeamSleep thelibre.news/foss-infrast...
FOSS infrastructure is under attack by AI companies
LLM scrapers are taking down FOSS projects' infrastructure, and it's getting worse.
thelibre.news
March 20, 2025 at 3:18 PM
Reposted by Eyal Ronen
rwc.iacr.org
Congratulations to the legendary Adi Shamir on his Levchin Prize win! Dr. Shamir donated the $10K prize money to students sponsorships.
March 26, 2025 at 9:16 AM
Reposted by Eyal Ronen
durumcrustulum.com
Now we have Adi Shamir's invited talk on 'How to Securely Implement Cryptography in Deep Neural Networks'

eprint.iacr.org/2025/288.pdf

#realworldcrypto
March 26, 2025 at 9:29 AM
Reposted by Eyal Ronen
shaneharris.bsky.social
In 25 years of covering national security, I’ve never seen a story like this: Senior Trump officials discussed planning for the U.S. attack on Yemen in a Signal group--and inadvertently added the editor-in-chief of The Atlantic. www.theatlantic.com/politics/arc...
The Trump Administration Accidentally Texted Me Its War Plans
U.S. national-security leaders included me in a group chat about upcoming military strikes in Yemen. I didn’t think it could be real. Then the bombs started falling.
www.theatlantic.com
March 24, 2025 at 4:11 PM
Reposted by Eyal Ronen
malb.bsky.social
*Friends don’t let friends deploy a cryptographic protocol without a formal cryptographic analysis* martinralbrecht.wordpress.com/2025/03/16/a... @kennyog.bsky.social @eyalr0.bsky.social @lenka.sh
March 16, 2025 at 11:38 AM
Reposted by Eyal Ronen
kennyog.bsky.social
It’s finally out - our 107-page analysis of key exchange in Telegram in which we proved (after massive effort) that the bespoke protocol is ok, if you’re willing to make some uncomfy assumptions on the home-grown KDF. With @malb.bsky.social, @eyalr0.bsky.social, Lenka Mareková and Igors Stepanovs.
eprint.ing.bot ePrint Updates @eprint.ing.bot · Mar 11
Analysis of the Telegram Key Exchange (Martin R. Albrecht, Lenka Mareková, Kenneth G. Paterson, Eyal Ronen, Igors Stepanovs) ia.cr/2025/451
Abstract. We describe, formally model, and prove the security of Telegram’s key exchange protocols for client-server communications. To achieve this, we develop a suitable multi-stage key exchange security model along with pseudocode descriptions of the Telegram protocols that are based on analysis of Telegram’s specifications and client source code. We carefully document how our descriptions differ from reality and justify our modelling choices. Our security proofs reduce the security of the protocols to that of their cryptographic building blocks, but the subsequent analysis of those building blocks requires the introduction of a number of novel security assumptions, reflecting many design decisions made by Telegram that are suboptimal from the perspective of formal analysis. Along the way, we provide a proof of IND-CCA security for the variant of RSA-OEAP+ used in Telegram and identify a hypothetical attack exploiting current Telegram server behaviour (which is not captured in our protocol descriptions). Finally, we reflect on the broader lessons about protocol design that can be taken from our work. Image showing part 2 of abstract.
March 11, 2025 at 5:19 PM
eyalr0.bsky.social
mensfeld.pl/2025/03/brin...

Certificates are hard
Certificate Apocalypse: Bringing Your Chromecast Back from the Dead
Learn how to fix your Chromecast 2 that stopped working on March 9, 2025 due to an expired certificate. Simple workarounds for both regular and factory-reset devices until Google releases an official ...
mensfeld.pl
March 11, 2025 at 4:14 PM
Reposted by Eyal Ronen
nicksullivan.org
The tentative program for Real World Crypto 2025 is live!

rwc.iacr.org/2025/program...

A huge thanks to my co-chair @malb.bsky.social and all the amazing program committee members for helping put this together. I'm looking forward to seeing everyone in Sofia!

#realworldcrypto
RWC 2025 program
Real World Crypto Symposium
rwc.iacr.org
February 19, 2025 at 12:25 PM
Reposted by Eyal Ronen
fakeiacr.bsky.social
Because of new tariffs, submissions to crypto with a non US author have a 20% reduction to their page limit.
February 4, 2025 at 5:48 AM
Reposted by Eyal Ronen
malb.bsky.social
The list of accepted talk at @rwc.iacr.org is now available: rwc.iacr.org/2025/accepte... Early registration ends 26 February. CC: programme co-chair @nicksullivan.org
RWC 2025 accepted papers
Real World Crypto Symposium
rwc.iacr.org
February 2, 2025 at 12:14 PM
Reposted by Eyal Ronen
eprint.ing.bot
How to Prove False Statements: Practical Attacks on Fiat-Shamir (Dmitry Khovratovich, Ron D. Rothblum, Lev Soukhanov) ia.cr/2025/118
Abstract. The Fiat-Shamir (FS) transform is a prolific and powerful technique for compiling public-coin interactive protocols into non-interactive ones. Roughly speaking, the idea is to replace the random coins of the verifier with the evaluations of a complex hash function. The FS transform is known to be sound in the random oracle model (i.e., when the hash function is modeled as a totally random function). However, when instantiating the random oracle using a concrete hash function, there are examples of protocols in which the transformation is not sound. So far all of these examples have been contrived protocols that were specifically designed to fail. In this work we show such an attack for a standard and popular interactive succinct argument, based on the GKR protocol, for verifying the correctness of a non-determinstic bounded-depth computation. For every choice of FS hash function, we show that a corresponding instantiation of this protocol, which was been widely studied in the literature and used also in practice, is not (adaptively) sound when compiled with the FS transform. Specifically, we construct an explicit circuit for which we can generate an accepting proof for a false statement. We further extend our attack and show that for every circuit C and desired output y, we can construct a functionally equivalent circuit C^(*), for which we can produce an accepting proof that C^(*) outputs y (regardless of whether or not this statement is true). This demonstrates that any security guarantee (if such exists) would have to depend on the specific implementation of the circuit C, rather than just its functionality. Lastly, we also demonstrate versions of the attack that violate non-adaptive soundness of the protocol – that is, we generate an attacking circuit that is independent of the underlying cryptographic objects. However, these versions are either less practical (as the attacking circuit has very large depth) or make some additional (reasonable) assumptions on the underlying cryptographic primitives. Image showing part 2 of abstract.
January 27, 2025 at 1:59 AM
Reposted by Eyal Ronen
rwc.iacr.org
Registration for RWC 2025 is open!

register.iacr.org/conferences/...
Before proceeding • IACR
register.iacr.org
January 14, 2025 at 7:14 PM
Reposted by Eyal Ronen
vanhoefm.bsky.social
After an embargo of 8 months, we are glad to finally share our USENIX Security '25 paper! We found more than 4 MILLION vulnerable tunneling servers by scanning the Internet.

These vulnerable servers can be abused as proxies to launch DDoS attacks and possibly to access internal networks.
January 14, 2025 at 2:12 PM