Accepted papers at CRYPTO 2026: iacr.org/cryptodb/dat...

New paper out 🎉 We introduce a new UPKE based on FESTA that supports unbounded updates and whose security is equivalent to FESTA! Our main result: a (four-dimensional) variant of FESTA has uniformly random public keys, which means that any random walk is a valid pk update.

Round 3 of the NIST additional signatures process announced! 🎉 And SQIsign is part of it!! ⛷️⛷️

Overdue quantum landscape update: sam-jaques.appspot.com/quantum_land... A 2d chart can only say so much. tl;dr new results are still overhyped, but definitely worth taking seriously. This chart is based on surface codes and a big question now is whether new codes can be practical (=>useless chart)

In honor of April Fool's Day (which has already started in Australia), I offer you debrisprint.iacr.org for AI-generated cryptology content.

We still have a few spots left at MaGIC! Registration closes this week... Hurry up if you want to be on top of all the latest news on Cryptographic Group Actions! magic-workshop.github.io

New PRISM improvements 🥳 We extended our PRISM paper to present two new variants: one that achieves strong unforgeability, and another that allows for smaller parameters and therefore faster signatures! eprint.iacr.org/2026/443.pdf

We're organizing a workshop on cryptographic group actions bringing together the isogeny and code communities. The workshop is just before Eurocrypt, a quick train away from Rome in the beautiful Marche. Early registration ends this week, so grab your spot soon! magic-workshop.github.io

I am very happy to announce that thanks to the hard work of many people (The "MIKE Team"), we now have a working implementation in SageMath of MIKE (Module Isogeny Key Exchange).

The IACR board sent a survey to members last year, and it took us a while to analyze the results and publish findings. You can see them at iacr.org/surveyresults/

New paper out! 🎉 We translate the algebraic group model to the (generic) isogeny setting, generalising previous results that were limited to oriented isogenies (we show that any result that holds in the AGAM also holds in the AIM). Using this model, we obtain two important results:

The Isogeny Club Season 7 starts today! At 5pm CEST, Bruno Sterner will talk about finding large smooth twins from short lattice vectors. More details at isogeny.club

Announcing The Isogeny Problems! A curated list of the seven foremost unsolved problems in isogeny-based cryptography. Solving one of these profound questions would mark a monumental advance, and as a resolver you'd get eternal honor and epic rewards! Full list: isogeni.es/problems

The EU wants to spend your money to assemble a giant mass surveillance machine with little effect on harm against children. Chat Control is not effective, weakens security for all and does not respect privacy. Contact your EU representatives and let them know. csa-scientist-open-letter.org/Sep2025

More than 500 researchers have signed an open letter against the dangerous EU proposal on chat control. The proposal remains ineffective, undoes decades of results in E2E encryption, and threatens the privacy of half a billion citizens. csa-scientist-open-letter.org/Sep2025

New somewhat redesigned, somewhat expanded website at andreabasso.com! If you find any dead links or things not working properly, please let me know

Using Learning with Rounding to Instantiate Post-Quantum Cryptographic Algorithms (Andrea Basso, Joppe W. Bos, Jan-Pieter D'Anvers, Angshuman Karmakar, Jose Maria Bermudo Mera, Joost Renes, Sujoy Sinha Roy, Frederik Vercauteren, Peng Wang, Yuewu Wang, Shicong Zhang, Chenxin Zhong) ia.cr/2025/1382

Well, this horrible idea refuses to die so we should refuse to let it pass and start organizing again. ec.europa.eu/commission/p...

And for For PhD & advanced MSc students! 🌍 Stipends available for students worldwide — thanks to our sponsors! 📋 Apply for stipends here: docs.google.com/forms/d/e/1F... 🖼️ Consider presenting your work in the Latincrypt poster session! 🔗 More info: ascrypto.org/2025/

An out-of-schedule update to my quantum landscape chart: sam-jaques.appspot.com/quantum_land..., prompted by @craiggidney.bsky.social 's new paper: arxiv.org/abs/2505.15917. A startling jump (20x) in how easy quantum factoring can be! Also: much improved web design!

We (finally) published all the material from this course on SQIsign, including lecture slides and exercise sheets for the Sage laboratory. Available here: github.com/andreavico/S...

Every time I'm writing a paper I always have the same question: is the attacker a person? Is the attacker a they or a it?

Really cool post on DH!

Starting in half an hour!

Isogeny-based signatures have consistently had a breakthrough every two years! Let's see what 2026 will bring... (Well, except for SQIsignHD that came a year too late, but that's probably because of Covid)

Registrations for the Decrypting Diversity Summit are open: decryptingdiversity.com/registration/ The event's focus is to develop actions to better support underrepresented groups in cryptography while showcasing the exceptional career paths and research contributions of these communities.

Next week @lucianomaino.bsky.social and I will teach a week-long course on SQIsign at the University of Trento. The course will be both in-person and online: if you're interested, you can tune in Monday morning at 10:30 at unitn.zoom.us/j/88902079708 (details and full schedule in the image below)

🥇The paper "PRISM: Simple And Compact Identification and Signatures From Large Prime Degree Isogenies", co-authored by COSIC, has won the best paper award at @IACR_News #PKC 2025 in Røros, Norway. #pkc2025 Link: link.springer.com/chapter/10.1...

Only a few days left to submit your paper to the second volume of the 2025 edition of Communications in Cryptology.... cic.iacr.org

Big announcement: RWC 2027 in Seattle! April 5-7 subject to board approval.

Registration is now open! www.cig.udl.cat/SQIparty2025...

Great talks today about group actions at the Swissogeny Day by Lorenz Panny and Ryan Rueger! We’re planning to host the next Swissogeny Day in the summer, if you’d like to attend, reach out!

This workshop is gonna be great: cool people, interesting talks, and lots of great research on SQIsign and isogeny-based crypto. Mark it in your calendars! And if you’re going to Eurocrypt, this is going to be convenient: the workshop is just the week before, and it’s not too far from Madrid

Together with @kennyog.bsky.social we're organising a meeting at Eurocrypt to discuss how the, let's say, "dramatically changing political landscape" affects cryptography and our community, both domestically in some countries but also internationally eurocrypt.iacr.org/2025/communi...

It’s finally out - our 107-page analysis of key exchange in Telegram in which we proved (after massive effort) that the bespoke protocol is ok, if you’re willing to make some uncomfy assumptions on the home-grown KDF. With @malb.bsky.social, @eyalr0.bsky.social, Lenka Mareková and Igors Stepanovs.

Some good news on the UK request for backdoors and Apple disabling E2E syncing

Happy to share this work with Paul Frixons, Valerie Gilchrist, Simon-Philipp Merz and Christophe Petit. We show that you have to be careful with new assumptions for cryptographic group actions. Namely for the CSI-SHARK assumption one can significantly beat Kuperberg using Childs-Van Dam

Excited to share this work on 2-dimensional KLPT which is joint work with Wouter Castryck, Thomas Decru, Abel Laval, Christophe Petit and Yan Bo Ti. This could pave the way for a 2-dimensional SQIsign and potentially other applications.

Really cool work showing that CSIDH is an *unrestricted* group action for *any* security level using HD representations! This is really exciting because many advanced constructions require an unrestricted group action, but until now all known constructions used params with shaky quantum security.

As part of the round-2 NIST submission, we developed a complete proof of security of SQIsign!

16th International Conference on Cryptology AFRICACRYPT 2025 July 21-23, 2025 – Rabat, Morocco 🇲🇦 Extended submission deadline in 1 week: africacrypt2025.sciencesconf.org Submit your best results ! See you in Rabat 🇲🇦 in July 2025.

Some (there will be 60) accepted papers for IACR PKC 2025 are now available online: iacr.org/cryptodb/dat...

Accepted papers for IACR Eurocrypt 2025 are now available online: iacr.org/cryptodb/dat...

Absolutely shameful: for the UK, to request it, and for Apple, to comply. But this is an additional reminder: if you use Apple devices and don't live in the UK, turn on advanced data protection (what Apple calls E2EE for most of their cloud data): support.apple.com/en-us/108756

New paper is out where we build a brand new isogeny-based signature! 🎉 - It's a hash-and-sign signature, which makes it more flexible for advanced constructions - Security depends on a new problem: computing prime-degree isogenies - Performance is comparable to SQIsign2D - Conceptually simpler

When GitHub is down less than a week before the NIST Round 2 deadline…

Interesting note showing a simple but cool attack on the (semihonest) OPRF from group action!

I’m excited to be in the editorial board of CiC next year and to read all the cool work that will be submitted there!

Continuiamo a dare la cittadinanza a chi ha antenati che erano italiani un secolo fa piuttosto che darla a chi ha vissuto in Italia tutta la vita. Va tutto benissimo.

2024 update for my chart on the landscape of quantum computing: sam-jaques.appspot.com/quantum_land... Not much visible on the chart, but Google's result (the one with the recent press attention) is a pretty big deal