the super secret project i've been working on the past year is out

Our work on sigma-rs and credentials was accepted to USENIX 2026! Huge thanks to my co-authors, the @torproject.org and @ooni.org communities for the real-world problems, feedback, and inspiration that shaped it. With pq-privacy is solved, the next step is post-quantum soundness. ia.cr/2026/794

Went to Tsinghua, Peking, IETF 125 to talk about cryptography. Striking how technology is embedded in daily life. Chinese students are fantastic.

the new dragon book cover is incredible

Got invited to @college-de-france.fr for a seminar about zero-knowledge and online anonymity! 🎉🎉🎉 www.college-de-france.fr/fr/agenda/se...

Thrilled to announce that my latest paper with Alessandro Chiesa has been accepted to TCC, the IACR conference on the theory of cryptography!

I'll present my latest paper on anonymous credentials and designated-verifier kzg at ACM CCS 2025 in Taipei!

Phrack #72 release reveals TTPs, backdoors and targets of a Chinese/North Korean state actor mimicking Kimsuky A copy of his workstation is available for all researchers to analyze! Article: data.ddosecrets.com/APT%20Down%2... Data dump: ddosecrets.com/article/apt-...

With Tom Lehrer's passing, I suppose this is a moment to share the story of the prank he played on the National Security Agency, and how it went undiscovered for nearly 60 years.

Yesterday, @cathie.bsky.social gave a great talk at @ietf.org 123 on the importance of standardizing Sigma protocols and our ongoing work toward a standard for zero-knowledge proofs! You can watch the talk here:

We updated our paper on Fiat-Shamir! We now take a closer look at the gap between what symmetric cryptography has focused on for over 10 years (indifferentiability) and what is actually needed for the soundness of ZKPs and SNARKs (something stronger!). eprint.iacr.org/2025/536

On the Concrete Security of BBS/BBS+ Signatures (Rutchathon Chairattana-Apirom, Stefano Tessaro) ia.cr/2025/1093

I'm happy to finally open-source lattirust, a library for lattice-based zero-knowledge/succinct arguments! Lattirust is somewhat like arkworks, but for lattices; and like lattigo, but for arguments. ➔ github.com/lattirust

so there's two nexus that do AI now, one is the world library and the other the world computer. here's the old one github.com/nexus-stc/stc

Our paper "Beyond the Circuit" was accepted at IACR's Communications in Cryptology! It contains a few simple protocols for simplifying foreign arithmetic in zero-knowledge proofs. Formally we introduce "Σ-reductions", a mix of "Σ-protocols" and "reductions of knowledge". 🗞️ cic.iacr.org/p/2/1/23/pdf

How to protect the OONI dataset from attacks, while preserving the privacy of OONI Probe users? In our latest blog post, we outline some of the key requirements for OONI's anonymous credential system: ooni.org/post/2025-re... #AnonymousCredentials #ooniprobe #ooni

Tomorrow I will venture outside research comfort zone to talk at the IETF about standardizing Fiat-Shamir and Σ-protocols. You can check out my slides here datatracker.ietf.org/meeting/122/...

Went to a meeting where they told me the Force cannot be double-spent and it made a lot of sense

knowledge and feelings

you're welcome, academics \newcommand{\promptinject}[1]{{\tiny\color{white} #1}}

I have updated my work on keyed-verification anonymous credentials, which is now 80 pages long and single authored. May it rest in peace 🪦 eprint.iacr.org/2024/1552.pdf

It’s telling me something

did a small blog post introducing anonymous credentials on OONI, a tool that measures censorship across the globe 💅

credential designers and identity-fluid users

Thrilled to be emerging from my research cave for a trip around Asia 🇸🇬 Singapore (17-22 Feb) NUS 🇹🇼 Taipei (22 Feb - 8 Mar) RigthsCon, Community Privacy Residency Are friends around?