Jim Miller

Engineering Director for Cryptography at Trail of Bits

[Jim Miller @TheMijCipher]

What a class act. Please don’t forget how kind, hard working, generous, and cracked you are too, my friend.

[cts🌸 @gf_256]

Since this has blown up, I’d like to shout out all the other trans founders. I won’t name them out of respect for their privacy.

There aren’t a lot of us out there and it’s hard. All the ones I’ve met are incredibly hard working, kind, and generous people, not to mention completely fucking cracked.

Shit like this happens all the time but that’s life, can’t make everyone like you. :/ Life is not easy—for anyone

[Craig Gidney @CraigGidney]

Congrats to Ryan Keegan for being the first to exploit the simulator we used to validate the secret quantum circuits: https://t.co/ZS66JmzyAO

It kills me that the (now fixed) bugs were simple (we didn't port the op validation code from C++ to Rust!), but that's to be expected.

[Yoichi Hirai @pirapira]

@trailofbits Going further, there’s a way to protect the guest program even against potential compiler bugs: formally verify the guest RISC-V assembly code, like I’m experimenting with in evm-asm.

[Steve Weis @sweis]

Great write up of how Trail of Bits was able to find vulnerabilities in Google’s zero knowledge prover and generate a fake proof:

https://t.co/1rRCcdQvuY

[Trail of Bits @trailofbits]

Google used a ZK proof to disclose a quantum breakthrough that cuts the cost of breaking cryptocurrency by 20x without handing attackers the circuit. We found anyone could forge a “proof” of an even stronger attack. 🧵

[Tjaden Hess @tjade273]

Lets break down these attacks:

https://t.co/dlX9QbCm0E

First up is https://t.co/SO0ZRY4Xto

The key insight is that TEEs do not randomize their memory encryption. This is because the encrypted data needs to fit in the same space as the plaintext, so there is no room for a nonce or IV.

The typical cipher mode is AES-XEX or the related AES-XTS.

https://t.co/mEVB2ZrIOg

Every memory location acts like an independently keyed cipher, so it’s not quite ECB Tux level bad, there is a sort of _temporal tux_ problem. Every time a value is encrypted at a particular memory location, the ciphertext is the same.

[Jim Miller @TheMijCipher]

My colleagues wrote a great explainer on the historic hack from today and what it means for the industry. Must read 👇

[Trail of Bits @trailofbits]

The $1.5B Bybit hack marks a new era in cryptocurrency security. Attackers have moved beyond technical exploits to sophisticated operational attacks. Read our initial analysis of this historic breach and its industry-wide implications: https://t.co/JVdABKdD4q

[Trail of Bits @trailofbits]

The $1.5B Bybit hack marks a new era in cryptocurrency security. Attackers have moved beyond technical exploits to sophisticated operational attacks. Read our initial analysis of this historic breach and its industry-wide implications: https://t.co/JVdABKdD4q

[Jim Miller @TheMijCipher]

I am honored to be selected as part of the program committee by the MPCA, so please don't hesitate to reach out with any questions. This will be a great event showcasing the practical side/challenges of MPC. I hope to see you all in Sofia ❤️

[Jim Miller @TheMijCipher]

Start the year off right and register/submit a talk for the Real World MPC workshop! The MPC Alliance is hosting this as a co-located event for Real World Crypto, and the CFP is now open and accepting talks across a wide variety of MPC topics 🙂. Details and links are in 🧵

[Jim Miller @TheMijCipher]

The RWMPC workshop will be a 1 day event on March 25 in Sofia, Bulgaria. The content will cover a variety of practical MPC use cases: currently accepting potential talks across real-world deployments, standards, security, formal verification, legal implications, and more!

[Jim Miller @TheMijCipher]

The first ever Queer in Cryptography conference will be held in Rochester, NY on March 6th and 7th 2025! Register now and come celebrate the many great cryptography contributions from the LGBTQ+ community- allies welcome! https://t.co/W4XvXAXIad

[Jim Miller @TheMijCipher]

@zama Or another, similar one would be the boxes with gloves that they use for handling nuclear material. For FHE this box would not have see-through glass and only allows for very specific operations with the gloves

[Jim Miller @TheMijCipher]

@zama I like extensions to the typical "lockbox" encryption analogy. For instance, the lockbox contains metal objects of differing sizes, and the FHE analogy is using a magnet to move the objects around (sort them by size, for example). Noise/weight are potential side-channel attacks

[Dan Guido @dguido]

.@trailofbits had one of the best weeks ever! From groundbreaking ML research to advancing post-quantum crypto, here's a summary of last week:🧵

[Jim Miller @TheMijCipher]

Interested in using any of the post quantum algorithms standardized this week? Check out our Rust implementation of SLH-DSA!

[Trail of Bits @trailofbits]

Two days ago, @NIST finalized three post-quantum cryptography standards. Today, we are announcing an open-source Rust implementation of one of these standards, SLH-DSA, now available in RustCrypto!
https://t.co/SbBI7h50aP

[Trail of Bits @trailofbits]

Two days ago, @NIST finalized three post-quantum cryptography standards. Today, we are announcing an open-source Rust implementation of one of these standards, SLH-DSA, now available in RustCrypto!
https://t.co/SbBI7h50aP

[Trail of Bits @trailofbits]

Will these algorithms start to become widely supported? Yes! Our crypto team anticipated this and implemented the stateless hash-based digital signature scheme (SLH-DSA or SPHINCS) in Rust, now part of RustCrypto.
https://t.co/TjPthEHTgc