Dennis Jackson
LightNews LightNews
banner
dennisjackson.bsky.social
Dennis Jackson
@dennisjackson.bsky.social
140 followers 110 following 2 posts
Cryptography @ Mozilla
Posts Replies Media Videos
Reposted by Dennis Jackson
signal.org
We are alarmed by reports that Germany is on the verge of a catastrophic about-face, reversing its longstanding and principled opposition to the EU’s Chat Control proposal which, if passed, could spell the end of the right to privacy in Europe. signal.org/blog/pdfs/ge...
signal.org
October 3, 2025 at 4:14 PM
Reposted by Dennis Jackson
tjesi.bsky.social
The EU Parliament has published a new proposal for Chat Control to mass-surveil all digital communication in Europe. The proposal is ineffective, weakens secure communication, and violates basic human privacy. This must be stopped immediately. #ChatControl
csa-scientist-open-letter.org/Sep2025
csa-scientist-open-letter.org
September 9, 2025 at 11:11 AM
Reposted by Dennis Jackson
tumbolia.bsky.social
Yesterday, @cathie.bsky.social gave a great talk at @ietf.org 123 on the importance of standardizing Sigma protocols and our ongoing work toward a standard for zero-knowledge proofs! You can watch the talk here:
IETF 123: Crypto Forum (CFRG) 2025-07-24 15:00
YouTube video by IETF - Internet Engineering Task Force
www.youtube.com
July 26, 2025 at 3:30 AM
Reposted by Dennis Jackson
susurrusus.bsky.social
New paper(!) on the "clubcard" data structure that we're using for WebPKI revocation checks in Firefox.

A clubcard is a membership test for an r element subset of an n element set. Size is ~1.13 log(n choose r) bits. Or (better!) ~1.13 Σ log(n_i choose r_i) where i indexes blocks of a partition.
eprint.ing.bot ePrint Updates @eprint.ing.bot · Apr 8
Clubcards for the WebPKI: smaller certificate revocation tests in theory and practice (John M. Schanck) ia.cr/2025/610
Abstract. CRLite is a low-bandwidth, low-latency, privacy-preserving mechanism for distributing certificate revocation data. A CRLite aggregator periodically encodes revocation data into a compact static hash set, or membership test, which can can be downloaded by clients and queried privately. We present a novel data-structure for membership tests, which we call a clubcard, and we evaluate the encoding efficiency of clubcards using data from Mozilla’s CRLite infrastructure. As of November 2024, the WebPKI contains over 900 million valid certificates and over 8 million revoked certificates. We describe an instantiation of CRLite that encodes the revocation status of these certificates in a 6.7 MB package. This is 54% smaller than the original instantiation of CRLite presented at the 2017 IEEE Symposium on Security and Privacy, and it is 21% smaller than the lower bound claimed in that work. A sequence of clubcards can encode a dynamic dataset like the WebPKI revocation set. Using data from late 2024 again, we find that clubcards encoding 6 hour delta updates to the WebPKI can be compressed to 26.8 kB on average—a size that makes CRLite truly practical. We have extended Mozilla’s CRLite infrastructure so that it can generate clubcards, and we have added client-side support for this system to Firefox. We report on some performance aspects of our implementation, which is currently the default revocation checking mechanism in Firefox Nightly, and we propose strategies for further reducing the bandwidth requirements of CRLite. Image showing part 2 of abstract.
April 8, 2025 at 6:46 PM
Reposted by Dennis Jackson
filippo.abyssdomain.expert
Ooooh this is an excellent application of Privacy Pass, the anonymous credential scheme we originally designed to ameliorate the pain of Cloudflare CAPTCHAs on Tor.

Authenticate with a paid account to obtain tokens, then anonymously redeem them to make unlinkable searches.
kagi.com Kagi HQ @kagi.com · Feb 13
Announcing Kagi Privacy Pass!

Kagi already respects your privacy when you search. With Privacy Pass, we’re taking it a step further by adding an extra layer of anonymity to ensure your searches are completely unlinkable to your account🔒

Learn more: blog.kagi.com/kagi-privacy...
At the top, the text 'Kagi Privacy Pass' is displayed alongside an illustration of Kagi’s mascot, which is a cartoon dog, lying down next to a yellow lock icon with a keyhole. Below, a user interface panel shows a toggle switch labeled 'Authenticate via Privacy Pass,' which is turned on. The panel also displays 'Remaining tokens: 486,' 'Status: Ready,' and a description: 'Searching on Kagi is already privacy-respecting. Authenticating via Privacy Pass adds an additional layer of anonymity, ensuring your searches remain completely unlinkable to your account.' A 'Learn more' link is included at the bottom.
February 13, 2025 at 9:17 PM
Reposted by Dennis Jackson
matthewdgreen.bsky.social
Crap crap crap. www.washingtonpost.com/technology/2...
U.K. orders Apple to let it spy on users’ encrypted accounts
Secret order requires blanket access to protected cloud backups around the world, which if implemented would undermine Apple’s privacy pledge to its users.
www.washingtonpost.com
February 7, 2025 at 12:09 PM
Reposted by Dennis Jackson
filippo.abyssdomain.expert
NIST released a draft of a non-binding document (IR 8547 ipd) saying they plan to disallow non-PQC in 2035.

2035 is ten years from now, there's no need to rush anything right now.

csrc.nist.gov/Projects/pqc... is still running and large ecosystems are still figuring out what/how to deploy.
Standardization of Additional Digital Signature Schemes - Post-Quantum Cryptography: Additional Digital Signature Schemes | CSRC | CSRC
Call for Additional Digital Signature Schemes for the Post-Quantum Cryptography Standardization Process (PDF) Closed June 1, 2023 The Round 2 candidates were announced October 24, 2024. NIST IR 8528...
csrc.nist.gov
November 24, 2024 at 3:02 PM