2025 K-pop edition with video lectures

Talk in just a few hours! 🗞️ eprint.iacr.org/2024/1552

Exciting to present it in the very same venue where I wrote a big chunk of it while attending @rightscon.org !

Would it be harder to believe Nicholas Bourbaki is a collective pseudonym or that Jean-Pierre Serre is a single person

A key takeaway: for 20 years, we’ve relied on a notion called indifferentiability to use random oracles over arbitrary-length spaces—but it’s not sufficient for knowledge soundness.
🗞️ eprint.iacr.org/2025/536

at this conference everyone has 4+ coauthors except me lol

Sorry for the late reply! Finally part of the CFRG!

hahahah i feel attacked

The paper is huge — it’s been a journey to nail down a proof.
I think it’s a solid step forward in narrowing down Fiat-Shamir attacks and characterizing the concrete security of ZKPs. It’s also been really helpful in shaping what a standard for Fiat-Shamir should look like.

Yes! Right. Secret signature or verification key (the latter I think is more common)

If the hash input is secret though you’ll be leaking some side channel information right? And the procedure is only terminating in expected time

ACM CCS ? and I do remember them even welcoming economical studies on malware — www.youtube.com/watch?v=5uAK...

lmao

that's not always the case right? If I am making an OR proof, I generate the commitment and the response of the simulated branch before getting the challenge of the verifier

In any case Nico was in the original discussions for this project and knows the door is open :)