Viewing profile — mti

Good point. Note however that PIR is a rather restricted form of search (e.g., with no privacy for the server), but even so, DEPIR has polylog(n) queries (not log n), and requires …

There is an even more fundamental reason why FHE cannot realistically be used for arbitrary computation: it is that some computations have much larger asymptomatic complexity on en…

While not mentioned by the author, there is an alternate reason why finite field DH can be seen as a special case of ECDH, kind of: namely, there exists special elliptic curves (ac…

The relevant category is really abelian group schemes (because DH necessarily works in a cyclic group), so 0 is quite reasonable.

Elligator is only tangentially relevant to the hashing problem. If "doesn't have a problematic structure" is understood in a weak sense, then this was already solved by Shallue and…

In that spirit, my pet "a monad is a monoid in the category of endofunctors, duh"-style one-line explanation of the Fourier transform is that it's just the decomposition in the com…

A map of algebraic curves is not a special case of a map between two sets. There aren't really source and destination sets to speak of. The fact that it is given by polynomials rea…

NTRU also relies on cyclotomic rings, so if distrust in cyclotomics was a good reason to reject Kyber, it would apply to NTRU too.

The hardness of discrete logs over fields doesn't have much to do with the hardness of elliptic curve discrete logs. At this stage, I don't think we have any evidence that curves o…

That's what we call a "fired if you do, fired if you don't" kind of situation.

I'm not sure what specific scheme you have in mind, but while FHE for Turing machines does exist, it is really, really hard to instantiate. A construction with some restrictions an…

I don't think most of the issues with freedom of speech in France would be of much concern to a putative startup founder, but they are real. For example, "expressing support for ac…

> I'm of the opinion that worked examples are often worse than no documentation. That's completely baffling to me so I'd be really curious to hear your reasons (or those of someone…

The claim was that they are independent, in the sense that they do not depend on monied interests for their financial survival, and have a real commitment to investigative journali…

Regular humans have, for over half a century, possessed the ability to annihilate the entirety of civilization by basically pushing a button. So it always amazes me when people fee…

> Elsevier's role isn't finding collaborators - it's finding reviewers This is also not true. It's usually journal editors who find reviewers. This is mostly unpaid work as well (p…

> Wall Whitman Is that what he will be known as from now on? :) On a more serious note, it's interesting to reread his poem _America_, which was certainly written more as an aspira…

Here in Japan, the NURO Hikari service of Sony Network Communications offers FTTH with 10 Gbps downlink and 2.5 Gbps uplink speeds for around ¥6500 (~65 USD) per month. It's only a…

Obfuscation is different from homomorphic encryption, and in some sense much more powerful. With homomorphic encryption, Alice can send some secret data to Bob in encrypted form, a…

Not completely clear to me what you mean by "calculated to be true", but you may want to look at the difference between computational and statistical zero knowledge. A computationa…