aka @veorq cofounder & CSO @taurus_hq author of https://xitter.cf/t.co/8Bbd6vuHic Signal: jpa.01
Joined May 2023
- Tweets415
- Following0
- Followers268
- Likes163
Pinned Tweet
I've got my @veorq account back, will be mainly posting from there
hey @cryptodavidw, looking at how the Drake-Kendrick "beef" boosts their sales and visibility, I suggest we start recording diss tracks about each others' crypto books
(we cant do worse than their last boring songs that sound GPT-generated)
I'm sure someone already found the problem with this paper eprint.iacr.org/2024/626.pdf
JP Aumasson retweeted
🧵1/ How can you privately prove your own location? In our latest research, we introduce Zero-Knowledge Location Privacy (ZKLP) via IEEE 754 compliant floating-point operations in SNARKs!
if you tokenize securities you should consider using the CMTAT token framework github.com/CMTA/CMTAT/, which has multiple advantages over other security tokens cmta.ch/news-articles/a-comp…
""Randar" is an exploit for Minecraft which uses LLL lattice reduction to crack the internal state of an incorrectly reused java.util.Random in the Minecraft server, then works backwards from that to locate other players currently loaded into the world."
github.com/spawnmason/randar…
JP Aumasson retweeted
Our 2024 call for failures is out! Help us spread the word! cfail.org/call-for-papers
JP Aumasson retweeted
Tracking down some TIMECOP alerts led to a 2021 gcc patch from ARM (gcc.gnu.org/git/?p=gcc.git;a…) turning (-x)>>31 into a bool, often breaking constant-time code. Can often work around with (-x)>>30, and asm is safer anyway, but for portable fallbacks we need security-aware compilers.
JP Aumasson retweeted
Delighted to find out that BLAKE2s/BLAKE3 is actually being used as a core building block in some zero-knowledge proof protocols, notably StarkWare's new "STWO":
HT @dlubarov @bfarmer
youtu.be/_eha0QqAbIA?si=X_hZ…
JP Aumasson retweeted
Chen’s paper has a bug, independently discovered by Hongxun Weng and Thomas Vidick, that he doesn’t know how to fix. If I understand correctly, in its current form the paper doesn’t yield any improvement on prior algorithms.
eprint.iacr.org/2024/555
Is lattice-based cryptography still (potentially) post-quantum now? 🥳
Update to #eprint555 by Yilei Chen
JP Aumasson retweeted
in 2017 i started to learn about zkps
then @zmanian told me that if i read serious cryptography he’d add me to the cryptocatz slack
this book taught me the foundations of cryptographic primitives, without it id struggle reading crypto papers
i keep copies in the heliax office
Cover reveal! 25% discount on B&N pre-orders at barnesandnoble.com/w/serious…
Had a blast working with @billpollock's @nostarch again.
Please repost :)
Cover reveal! 25% discount on B&N pre-orders at barnesandnoble.com/w/serious…
Had a blast working with @billpollock's @nostarch again.
Please repost :)
JP Aumasson retweeted
You're a crypto company moving your users assets in embedded wallets and are unsure about what regulations applies to you, that's the one piece you want to read!
We dig into regulations, requirements, costs, and solutions 👇
We hear one pain point time and again in our conversations with web3 builders: It's incredibly hard to navigate regulatory compliance. bastion.com/blog/navigating-…
"Our claim only invalidates the current version of the paper. If it is possible to take κ = O(log(n)/log(log(n)) and the algorithm is proven to still work (...)"
eprint.iacr.org/2024/583.pdf
JP Aumasson retweeted
We found a critical vulnerability in #PuTTY SSH client with NIST P-521 keys, that allows private key recovery from only 60 signatures, CVE-2024-31497! If you use #Putty or #Filezilla with ECDSA P-521, upgrade now and generate a new key! Joint work with @TrueSkrillor, details ⬇️