1/8 It felt like there was too much boilerplate & repetitive work in testing circuits with Circom & SnarkJS. So, I've built Circomkit, a toolkit that provides a simple interface and some testing utilities to develop & test Circom circuits. github.com/erhant/circomk…

Thrilled to share Π: A Unified Framework for Verifiable Secret Sharing ia.cr/2023/1669 🥧2x Shamir + Commitment -->VSS!😍 New VSS: Feldman↔️Π_F! Pedersen↔️Π_P! ABCP23↔️Π_LA (PQ-secure & 1x slower than Shamir)! ... in Turkish: Π means Share & Π_LA [paʃ'la]: Share It!🙂

1/ Excited, but frankly quite worried, about a new work with the wonderful 🏴 levochka.eth 🏴 💙💛🇮🇱☀️🦁🗡️ and Dmitry Khovratovich: ia.cr/2025/118 We break soundness of a standard protocol (essentially commit to witness and run GKR) by constructing a circuit for which we can prove a false statement.

Always felt like this was bound to happen. Incredible work.

Excited to share our new work, DewTwo! DewTwo is the smallest known transparent pcs (with a 4.5 KB eval proof) built solely from falsifiable assumptions in groups of unknown order. A joint work with Benedikt Bünz ☕️, Tushar, and Sriram. Link: eprint.iacr.org/2025/129.pdf

An Introduction to Interactive Theorem Provers zksecurity.xyz/blog/posts/int…

We used Gemini 2 Flash to build Cursor for arXiv papers Highlight any section of a paper to ask questions and “@” other papers to quickly add to context and compare results, benchmarks, etc.

Introducing bugs.zksecurity.xyz a knowledge base for ZK bugs

Just dropped a blog post breaking down the circle group and trace domain for Circle STARKs! Stay tuned for Part III, where we’ll dive into the circle FFT.

Delighted to share my new paper with Eylon Yogev presenting a new Fiat-Shamir (FS) transformation that aims to be secure against recent white-box attacks: ia.cr/2025/329 The FS transformation is used to convert public-coin interactive protocols to non-interactive ones.

check our collab' with archetype on the latest theoretical (or practical?) attack on Fiat-Shamir and GKR

Curious? Check out our paper with Srivatsan Sridhar Ertem Nusret Tas Dionysis Zindros David Tse forthcoming at Financial Crypto in Japan in April! We’ve posted it as a preprint: eprint.iacr.org/2024/1799

🪄✨ And for our next trick, choose a code, any code! Introducing WARP 🌀, the first linear-time accumulation scheme. Brought to you by Benedikt Bünz ☕️, Alessandro Chiesa, William and myself. 📚: ia.cr/2025/753 🧑‍💻: (soon)

Our latest blog post explores key ideas behind batched and hiding KZG commitments in the univariate setting. If you're into polynomial commitment schemes, give it a read!

SpongeFiSh, which superseeds Merlin, would have prevented this Solana bug! 🧽🐟 github.com/arkworks-rs/sp…

Builders Week Istanbul website is live! 🥳 Schedule, partners, and everything you’re curious about, it’s all there. 👀 Wanna see what’s cooking?

Hopefully, I will also be there this year!

I'm happy to finally open-source lattirust, a library for lattice-based zero-knowledge/succinct arguments! Lattirust is somewhat like arkworks, but for lattices; and like lattigo, but for arguments. ➔ github.com/lattirust

Wrote a post on the Google Wallet ZKP This is not "just a simple application of ZK", it has a very interesting proof system and many brilliant insights. Highly recommend to have a closer look! Summary and link below (and Zero Knowledge Podcast episode coming soon 👀)

Got the PhD. Stay tuned for what’s next!