Marc ilunga

Cryptography analyst @ trailofbits | ETH Zürich alumni | I like swing music, lindy hop |

[Trail of Bits @trailofbits]

Google used a ZK proof to disclose a quantum breakthrough that cuts the cost of breaking cryptocurrency by 20x without handing attackers the circuit. We found anyone could forge a “proof” of an even stronger attack. 🧵

[Marc ilunga @MarciIlunga]

@GiacomoFenzi @GalArnon42 Congratulations!

[Marc ilunga @MarciIlunga]

@kennyog @RocketChat Send a small, guided rocket towards their HQ. With “vulnerability disclosure” written on the rocket and the disclosure email on a USB stick inside the rocket.

[Marc ilunga @MarciIlunga]

@GiacomoFenzi @IACRcrypto Congratulations!

[Marc ilunga @MarciIlunga]

OK... I guess back to lettuce, then? Decadent cryptographic schemes may still be enjoyed during AprèsSQI sessions.

[Marc ilunga @MarciIlunga]

While experts are figuring things out, does anyone have alternatives to lettuce-based cryptography diets?

[Marc ilunga @MarciIlunga]

@kutasp Cryptography with a view! That's always nice!

[Marc ilunga @MarciIlunga]

While experts are figuring things out, does anyone have alternatives to lettuce-based cryptography diets?

[Jim Miller @TheMijCipher]

My RWC ‘24 talk on Weak Fiat-Shamir Attacks is now available on YouTube
https://t.co/kbB6x5rg95

[Tjaden Hess @tjade273]

Signal just dropped the beta version of Usernames - you no longer need to reveal your phone number when talking to your friends.

The announcement also mentions some unusual privacy guarantees around usernames.

How does this work under the hood? Let's take a look!

[Marc ilunga @MarciIlunga]

https://t.co/9DSI819fWN: Interesting new work building zk-snarks for lean theorems.
> A zkPiproof is sufficiently short that Fermat could have written one in the margin of his notebook to convince the world, in zero knowledge, that he proved his famous last theorem.

[Fredrik Dahlgren @fegge]

Would you like to get started with CodeQL but don’t know how, or do you want to enable code scanning with CodeQL for your GitHub repository? Check out our new Testing Handbook chapter on CodeQL!

[Marc ilunga @MarciIlunga]

@cjpatton_ HMAC is a dual PRF (slowly digesting the paper though).

[Marc ilunga @MarciIlunga]

@cronokirby Is this the case as well when the analsys is doing kind of a stepwise refinement of idealizations? Like ROM proof -> instanciate with indiff. Hash - > iterate further if at all possible. I wonder if the two first step couldn't interfere negatively from lack of tightness.

[Marc ilunga @MarciIlunga]

@claucece @djwj_ Yay! Congratulations 🎉🎉🎉

[Marc ilunga @MarciIlunga]

I am surprised by how many of the comments completely misunderstand what CSPRNG is meant to do in this case.

[LiveOverflow 🔴 @LiveOverflow]

Let's play a game. W̵h̵a̵t̵ ̵i̵s̵ ̵t̵h̵e̵ ̵v̵u̵l̵n̵e̵r̵a̵b̵i̵l̵i̵t̵y̵?̵
How would you respond to this report?

[Marc ilunga @MarciIlunga]

Bing was trying to explain the bounded storage model. It took a while to get the text after "Unconditional Security".

[Yupeng Zhang @YupengZhang7]

This paper is finally out https://t.co/YxEvafUxJ1! A new ZKP protocol based on Plonk that can be fully distributed with only O(1) communication per machine! It was accepted by S&P 2024, and here's a post explaining the ideas and properties. https://t.co/ourZ7z1DTZ

[Trail of Bits @trailofbits]

Join our cryptographer @OpalTob at DeCompute, where she will present her joint work on weak Fiat-Shamir attacks against modern proof systems, which recently won a distinguished paper award at IEEE S&P 2023!

[Marc ilunga @MarciIlunga]

@cronokirby Congratulations 🎉