#ePrint Breaking Rainbow Takes a Weekend on a Laptop: W Beullens ia.cr/2022/214

Why are you idiots using TOOLS? JUST👏BE👏BETTER👏CODERS👏

PhD Thesis submitted✅🎉 Has been a great journey, thank you Steven Galbraith for your excellent supervision! Now the wait for the examiners' reports begins 😎

An alpha version of my coinswap project is released! lists.linuxfoundation.org/pipermail/bitc… Doesnt have all the features yet, but works on regtest, signet and mainnet Imagine a new privacy tech for bitcoin, like coinjoin, but cant be blocked b/c the txes look exactly the same as regular txes

when reading text in a non-native language & wondering how it's pronounced, u can enter this in devtools to have the browser pronounce it: u=new SpeechSynthesisUtterance(getSelection().toString());u.lang='ru-RU';speechSynthesis.speak(u) (replace 'ru-RU' with any BCP 47 tag)

This paper got less attention than I thought it would. Among its claims is that BIP32 (used extensively by Bitcoin but also many other blockchains) offers 91 bits of security. I always assumed some low n?<128, but not so low. Given BIP32 is a decade old it was overdue for review.

On Thursday I am giving an online seminar on isogeny proofs of knowledge monash.edu/it/ssc/cyberse…

Congratulations to Samuel Dobson , who successfully defended his PhD thesis "Key Exchange and Zero-Knowledge Proofs from Isogenies and Hyperelliptic Curves" this morning.

#ePrint An efficient key recovery attack on SIDH (preliminary version): W Castryck, T Decru ia.cr/2022/975

It works!! Here's a SageMath implementation of the SIDH Key Recovery attack of Castryck and Decru. Huge thanks to R. Their insights allowed us to directly compute the image of points in the Jacobian through divisors. No Gröbner needed! github.com/jack4818/Castr…

I just posted an updated and clarified version of my previous paper (which was too hastily written...) on breaking SIDH: eprint.iacr.org/2022/1038.pdf

Not bad

In this preprint, in order to counter the Castryck-Decru attack (and derivatives), we suggest to use a fixed degree, but then mask only the torsion point information. How do we do that and why is this worth exploring? A thread! 1/n

Next version of Bouncy Castle will also include CRYSTALS-Kyber, CRYSTALS-Dilithium, Falcon, and other algorithms! It is available as beta right now at downloads.bouncycastle.org/betas/ 🎉. A great way to experiment (with care!) with the schemes being standardized by NIST.

Starting next week: VaNTAGe seminar series on isogeny-based cryptosystems sites.google.com/view/vantagese…

If you generated a wallet using Libbitcoin's Bitcoin Explorer, including as described in the appendix to Mastering Bitcoin, your funds are at risk (or already stolen). Full details: milksad.info