A thread in which @sockpuppet.org presents some of the juiciest morsels from our paper at zkae.io :

A very nice blogpost explaining our work - slices right through the marketing from the vendors: medium.com/reading-sh/y...

Do you use a cloud-based password manager? So what's your threat model? Vendors like Bitwarden, Dashlane, LastPass and 1Password offer you "Zero Knowledge Encryption", with statements like: "Not even the team at Bitwarden can read your data (even if we wanted to)." We decided to test this… 1/n

Miracle of miracles: Deutsche Bahn runs almost on time!

Almost in Karlsruhe for this talk. Looking forward to some great discussions with the KIT crypto and security community.

"The heroes of my fields have slain one of the four horsemen of the apocalypse, while the heroes of your field gathered in the desert to create a new one" is such a clear, brutal rebuttal to Manhattan Project mythology, and now the most venal idiots alive are bringing back diseases because they can.

The sun still rises. And it will continue to do so. Long after the fascists are gone.

Submission week for the Cryptographic Application Workshop (CAW), an affiliated event at Eurocrypt'26 in Rome! Please submit your talk proposals on constructive real-world crypto using the following instructions before Jan 23, 2026 AoE. All infos on: caw.cryptanalysis.fun.

I insisted that Nadhim Zahawi delete this tweet before joining us, because one of our rules is that everyone in Reform UK has to pretend that I’m not racist.

Achievement unlocked: I finished the Private Eye Christmas cryptic crossword (#820). It’s a right corker, thanks to Cyclops for providing the much appreciated Yuletide mental gymnastics! @privateeyenews.bsky.social

Doubting Tomcat.

Some great talks to come at #RWC026 including 5 (!) from the Applied Cryptography research group @csateth.bsky.social on topics including Signal’s security, designing SecureDrop Next Generation, fuzzing of crypto libraries…. and one mystery topic still under embargo.

Winter sun on Zuriberg.

Catching up on recent posts on the CFRG mailing list.

Do I let this guy stay in the garage or gently remove him to a nice damp bit of garden?

Would it be too salty to say how reassuring it is to find so many new experts in quantum computing and post quantum cryptography suddenly popping up over on LinkedIn?

New reading material dropped.

The Call for Contributed Talks is now open for RWC 2026! And the deadline for submissions is now Oct. 10, 2025. rwc.iacr.org/2026/contrib...

Reading this gave me a lift - we are rapidly progressing to a carbon-free future, at least outside the US (who are being held back by extremist ideology and power of big oil lobbyists).

Hello again from mighty Svalbard, 78 degrees North, 125 days of constant sunlight.

Some impressions of Longyearbyen from the last few days.

It’s nearly midnight in Svalbard, and I’m about to try to give an entertaining yet challenging talk at #ArcticCrypt -wish me luck!

bill this is the kind of mansplaining audacity that’s preserved in museums for future generations to learn from as a cautionary tale this is mansplaining in the form of a long-term nuclear waste warning message

On Svalbard for #ArcticCrypt2025 - looking forward to a week of daylight, cryptography research and exploration.

Slides of my talk titled "Lattices give us KEMs and FHE, but where are the efficient lattice PETs? -- By Example of (Verifiable) Oblivious PRFs" given at spiqe-workshop.github.io are here: github.com/malb/talks/b... Thanks @kennyog.bsky.social and @jurajsomorovsky.bsky.social for inviting me.

Reminder that the MSCA postdoctoral program exists. If you have a PhD and want to work in a European lab, you have until September to apply. Just contact them now. ec.europa.eu/info/funding...

Thanks to our wonderful organization team and to the over 800 participants (including the affiliated events) that helped making Eurocrypt 2025 a success! And now I'll go to sleep for a year or two...

TeleMessage, the Israeli company that makes the modified Signal app used by Trump officials, was hacked. “I would say the whole process took about 15-20 minutes,” the hacker said micahflee.com/the-signal-c...

I always tell this to my research assistants: if you use AI to summarize and write for you, you don't need to be my assistant. You don't need to do research at all. Research should be selfish: *you* (not a machine) learn how to read, write, innovate, and dream. Otherwise, what is the point?

The source code for the TM SGNL apps (basically a backdoored version of Signal used by Trump officials) is public! Since it's open source, I've pushed it to github for easier research micahflee.com/heres-the-so...

Don't forget to submit your most hilarious talk, musical performance, general announcement or recent result to the Eurocrypt 2025 Rump Session!

Just about ready to set off to Madrid for #eurocrypt 2025, where I’ll have the great honour of giving the 2025 IACR Distinguished Lecture on Tuesday afternoon. #iacr #cryptography

And here’s the TeleMessage webpage describing the Signal archiving solution: www.telemessage.com/mobile-archi... Lovely bit of data concentration. Big questions to be answered: how is data secured in the archive? And how can we be sure there is no third party backdoor access to the archive?

Interesting and relevant read for any security researchers who ever worked under embargo with journalists…

I have tariffed the penguins that are on Heard Island and which you were probably assuming did not export goods forgive me they were taking advantage of us so cunning and so cold

Actual cryptographers have studied this. Here js their peer-reviewed research: mtpsym.github.io eprint.iacr.org/2022/595 eprint.iacr.org/2025/451

I really appreciate all the hard work done by the #realworldcrypto steering committee and to AWS for stepping up to organise in Seattle in 2027, but I’m going to come out and say it: with the US as it now is, I think this choice of location is a mistake.

LIVE FROM SOFÍA BULGARIA, IT'S REAL WORLD CRYPTO! #realworldcrypto

Our latest work is out! Breaking and repairing Content-Defined Chunking, with impact across multiple backup systems. Read Kien Tuong Truong’s blog here: blog.ktruong.dev/breaking-cdc

🚀Hello, world! We are now live on Bluesky. This is the official account of the Department of Computer Science at ETH Zurich. Follow us for cutting-edge research, the latest innovations, event updates and insights into the future of technology. inf.ethz.ch @csateth.bsky.social @ethzurich.bsky.social

Grateful to @iacrcrypto.bsky.social for acting quickly to address serious concerns from the community.

The preliminary program for the Cryptographic Applications Workshop (CAW) at Eurocrypt'25 is out. #CAW focuses on the construction and analysis of cryptography built for practice. This thread gives a quick overview; the full program and abstracts are here: caw.cryptanalysis.fun#program

#CAW offers again a few registration waivers. We hope these waivers will help local (grad/undergrad) students to attend our workshop and get a preview of cryptography beyond the classroom and make their first connections to the community. More info: caw.cryptanalysis.fun#student-regi...

A lot of global academic conferencing is centered around the US, and US academic orgs have to be thinking very seriously now. You cannot continue to carry on with in person conferencing as if foreign scholars have no impediments to travel. I know we like to pretend everything is "normal" again but..

The tentative program for Real World Crypto 2025 is live! rwc.iacr.org/2025/program... A huge thanks to my co-chair @malb.bsky.social and all the amazing program committee members for helping put this together. I'm looking forward to seeing everyone in Sofia! #realworldcrypto