The Joy Of Cryptography

The Joy of Cryptography is an undergraduate-level textbook that introduces students to the fundamentals of provable security. By @GarbledCircus via @mitpress

[Mike Rosulek @GarbledCircus]

The Joy of Cryptography is now available for free online, in its entirety. https://t.co/FJbvp5jXOw

Thanks to @mitpress for supporting open access.

[The Joy Of Cryptography @JoyOfCrypto]

A preview of the first 3 chapters is now at https://t.co/Yz3Hvlc4jV

[Mike Rosulek @GarbledCircus]

Here is a little writeup I prepared for the Computer Aided Security Proofs (CAPS) workshop at Eurocrypt, showing the CPA-security of hybrid encryption in the style of @JoyOfCrypto. It should give you a sense of what the upcoming web edition will be like! https://t.co/uPLoMUgnLC

[The Joy Of Cryptography @JoyOfCrypto]

🤔 https://t.co/HncynMijua

[Mike Rosulek @GarbledCircus]

Big announcement: The next edition of The Joy of Cryptography will be published by @mitpress!

[The Joy Of Cryptography @JoyOfCrypto]

Well that certainly clears things up.

[The Joy Of Cryptography @JoyOfCrypto]

Best way to show what changes in one step of a game-hopping proof? (see pictures below)

[The Joy Of Cryptography @JoyOfCrypto]

Some other thoughts:

[The Joy Of Cryptography @JoyOfCrypto]

@kaepora @veorq It deserves a name, and I'm all ears to other suggestions.

[The Joy Of Cryptography @JoyOfCrypto]

@prettyokprivacy MLS / treeKEM

[The Joy Of Cryptography @JoyOfCrypto]

Working on an encrypted messaging chapter...

[Chelsea Komlo @chelseakomlo]

Just received a hard bound copy of @JoyOfCrypto - many thanks to @durumcrustulum!! 📕 🧮 📚

[The Joy Of Cryptography @JoyOfCrypto]

@cronokirby Indeed, the problem is that all the coolest stuff seems to be ideal permutation / ideal cipher and not RO.

[The Joy Of Cryptography @JoyOfCrypto]

What is your favorite random-oracle construction in the *symmetric-key* world?

[Martin R. Albrecht @martinralbrecht]

I had put off looking at @JoyOfCrypto because "meh, why another cryptography textbook". How wrong I was, it is fantastic. I never thought you could make the OTP interesting. Using it to introduce hybrid arguments is brilliant w/o indistinguishability is so nice.

[The Joy Of Cryptography @JoyOfCrypto]

@neilmaddog Wow, thanks very much for this thoughtful and insightful review!

The only thing I'd like to add is that hybrid encryption is indeed covered in section 15.4, although I don't use the terms KEM/DEM (and don't discuss KEM in contrast to full-fledged PKE).