Viewing profile — somezero

The entire argument is based on the definition of an “Incoherent cryptosystem”, which is too restrictive to be useful for cases that you want eg. Tor is also developed and distribu…

https://en.wikipedia.org/wiki/Prime_omega_function https://en.wikipedia.org/wiki/Liouville_function

This is not just a funny joke, but also timely given the recent sanctions. https://en.wikipedia.org/wiki/International_sanctions_agains...

FHE is simply the wrong tool here. FHE is for a central server operating on data held/known by another. They want MPC -multiple parties jointly computing on distributed data- and t…

Gauss 2.0; He’s very prolific, very famous in the math community. In this context, he is noteworthy because he’s taking automated theorem proving seriously which destigmatizes it f…

Not sure simplicity of spec translates into simplicity of user code. This change is backward compatible and will allow things that previously were disallowed.

People [sadly] put a lot of "exotic" cryptography/distributed systems under the term "blockchain" eg. If you want to do byzantine agreement with sub quadratic message complexity, w…

It’s all just bytes and hashes and alike at the bottom. Absolutely nothing magical. It is the abstractions over them that makes them esoteric, not the fundamental building blocks. …

> zk signature schemes exist and are implied by the existence of one way functions and publicly verifiable nizk. Almost. The result is from CRYPTO89 paper of Bellare and Goldwasser…

A signature is a PoK, but not ZK.

Sybil attacks [1] came out about a decade before the Red Balloons paper [2] or the DARPA Challenge itself [3]. It is proven in [1] that CA is necessary for a Sybil-proof system, wh…

EdDSA signatures are not Schnorr signatures. A Schnorr signature is dlog proof made non interactive with fiat Shamir binded with the message, and that is equivalent/verifiable as a…

I was a long time keepass user but moved to Bitwarden. My problem with keepass is the low quality and often poorly supported closed source clients that you get on mobile.

This is a molecule. With a provable cryptographic property. Honestly for this one I don’t care about “real security”.

Thanks! I’ll definitely take a look. These works are valuable but my problem is just with that particular claim about CAs. 1. This impossibility theorem is proved in a really broad…

I’m not saying his paper is wrong or not up to the workshop quality. But he’s saying something against an easy-to-prove impossibility theorem in a seriously sloppy/hand-wavy way. I…

The only way to provably prevent Sybil attacks are CAs ( https://www.freehaven.net/anonbib/cache/sybil.pdf ) This is why almost all P2P and DHT papers assumed existence of a CA in …

Sure! It’s P2P, but doesn’t need centralized certificate authorities (= Has some Sybil resistance)

heapq exposes a minheap by default, but there is a maxheap as well that for some reason, is not exposed! Just do heapq._heapify_max

The paper is simple and readable enough for me to not have to comment. Anyway, The abstract itself says: > This paper shows that, without a logically centralized authority, Sybil a…

I'm fine with a sybil resistance mechanism (although it's not sybil-proof, and some particular forms of sybil-resistance are based on faulty models [1]) The problem is that this pa…

It doesn't give you sybil-proof. It gives you sybil-resistance, and that, in a non-deterministic protocol.