Gregor Mitscha-Baude
LightNews LightNews
banner
gregor.plusepsilon.com
Gregor Mitscha-Baude
@gregor.plusepsilon.com
180 followers 200 following 18 posts
Co-founder zksecurity.xyz | Math & crypto | 🇦🇹
Posts Replies Media Videos
gregor.plusepsilon.com
this is so much fun xD
March 27, 2025 at 10:21 AM
gregor.plusepsilon.com
ridiculous and beautiful, TS types running Doom
michigantypescript.com MichiganTypeScript @michigantypescript.com · Feb 26
Doom now runs in @typescriptlang.org types. What a journey this one's been.
the famous "ULTIMATE DOOM" poster, but it says "TYPESCRIPT TYPES"
February 27, 2025 at 8:40 AM
Reposted by Gregor Mitscha-Baude
eprint.ing.bot
How to Prove False Statements: Practical Attacks on Fiat-Shamir (Dmitry Khovratovich, Ron D. Rothblum, Lev Soukhanov) ia.cr/2025/118
Abstract. The Fiat-Shamir (FS) transform is a prolific and powerful technique for compiling public-coin interactive protocols into non-interactive ones. Roughly speaking, the idea is to replace the random coins of the verifier with the evaluations of a complex hash function. The FS transform is known to be sound in the random oracle model (i.e., when the hash function is modeled as a totally random function). However, when instantiating the random oracle using a concrete hash function, there are examples of protocols in which the transformation is not sound. So far all of these examples have been contrived protocols that were specifically designed to fail. In this work we show such an attack for a standard and popular interactive succinct argument, based on the GKR protocol, for verifying the correctness of a non-determinstic bounded-depth computation. For every choice of FS hash function, we show that a corresponding instantiation of this protocol, which was been widely studied in the literature and used also in practice, is not (adaptively) sound when compiled with the FS transform. Specifically, we construct an explicit circuit for which we can generate an accepting proof for a false statement. We further extend our attack and show that for every circuit C and desired output y, we can construct a functionally equivalent circuit C^(*), for which we can produce an accepting proof that C^(*) outputs y (regardless of whether or not this statement is true). This demonstrates that any security guarantee (if such exists) would have to depend on the specific implementation of the circuit C, rather than just its functionality. Lastly, we also demonstrate versions of the attack that violate non-adaptive soundness of the protocol – that is, we generate an attacking circuit that is independent of the underlying cryptographic objects. However, these versions are either less practical (as the attacking circuit has very large depth) or make some additional (reasonable) assumptions on the underlying cryptographic primitives. Image showing part 2 of abstract.
January 27, 2025 at 1:59 AM
gregor.plusepsilon.com
wurde das erste mal hier geblockt, und es fühlt sich nicht gut an. nur weil ich in der crypto industrie arbeite hab ich nichts mit irgendeinem scam zu tun

als linker finde ich es extrem schade wie negativ crypto (& tech generell) bei vielen konnotiert ist. speziell v einem politikwissenschaftler :(
January 23, 2025 at 11:28 AM
gregor.plusepsilon.com
Great thesis explaining the weird state of politics
hankgreen.bsky.social Hank Green @hankgreen.bsky.social · Nov 22
This is one of those videos that you could work on forever, but suddenly it felt very important to make it, so I finally did: www.youtube.com/watch?v=d8Pn...
Populism, Media Revolutions, and Our Terrible Moment
YouTube video by vlogbrothers
www.youtube.com
December 6, 2024 at 8:24 AM
gregor.plusepsilon.com
Seems like .at 🇦🇹 suddenly became a cool TLD because of atproto :D
December 2, 2024 at 12:03 PM
gregor.plusepsilon.com
Wtf this makes no sense
howard.fm Jeremy Howard @howard.fm · Nov 28
Alpin was permanently banned from bsky for this.
November 28, 2024 at 7:59 PM
gregor.plusepsilon.com
Watching this great talk about the AT protocol
+ seeing the #eXit of big Austrian journalist accounts
= genuinely excited about BlueSky ❤️
danabra.mov dan @danabra.mov · Oct 21
now might be a good time to plug the talk i gave last month about the AT Protocol. it’s about the relationship between the user and the product, about the shape of the web, and a bit about death
Web Without Walls — Dan Abramov | React Universe Conf 2024
YouTube video by Callstack Engineers
youtu.be
November 26, 2024 at 2:25 PM