Ariel Wengroff

@JeffGSpursZone @elliot_co @Ledger hahaha don’t be starting rumors !!

@elliot_co @AWengroff but i hear @Ledger has MORE defense than even Wemby! 😮

Spurs to return to France in 2027 LINK - buff.ly/wxdX7jZ #sanantonio #nba #porvida #gospursgo

@JeffGSpursZone @elliot_co always @JeffGSpursZone ‼️‼️‼️🫶

@elliot_co same. i know @AWengroff and the crew will show me the best spots. 🫡

🔔Post-Quantum Signatures: NIST's Second Wave In August 2024, NIST finalized its first PQC standards: ML-KEM (key exchange), ML-DSA, and SLH-DSA (signatures). A third signature, Falcon (FN-DSA, FIPS 206), is still in draft. Last week, NIST announced the nine candidates advancing to Round 3 of a parallel competition aimed at additional signature schemes, explicitly chosen to fill the gaps left by the first wave. Each of the standardized signatures comes with sharp trade-offs. None of them is naturally suited to threshold signing, and all have signatures that are large compared to ECDSA's 64 bytes. ➡️ SLH-DSA (SPHINCS+, hash-based) The most conservative choice: its security rests only on the collision resistance of a hash function. The price is enormous signatures (7–50 KB !!!). It is the safest pick for very long-lived signatures (firmware, archival, some blockchains such as QRL). ➡️ML-DSA (Dilithium, lattice-based). Compact and fast, while elegant, is younger than hash-based assumptions. It is becoming the default for TLS, PKI, and most non-blockchain ecosystems (~2.4 KB signatures). ➡️Falcon (FN-DSA, lattice-based). The smallest of the three (~666 B at NIST-I), which is why Algorand and Solana selected it. Its drawback: signing relies on floating-point arithmetic, making error-prone and side-channel-resistant/ constant-time implementations notoriously hard. Its FIPS 206 standard is still in draft. 🔍Most blockchains are leaning towards customized shorter versions of SLH-DSA. NIST is organizing a second wave of standardization. The goal is twofold: shrink signature sizes and diversify the underlying mathematics so a single cryptanalysis breakthrough cannot break everything. The nine Round 3 finalists span five families: 🔸 Isogeny: SQIsign 🔸 Lattice: HAWK 🔸 MPC-in-the-Head: MQOM, SDitH 🔸 Multivariate: MAYO, QR-UOV, SNOVA, UOV 🔸 Symmetric-based: FAEST Notably, no code-based scheme survived. Both Round 2 candidates were eliminated: LESS and CROSS were dropped because of 2 attacks 👉 Two candidates worth watching ⏩ SQIsign produces the smallest known post-quantum signatures by a wide margin: from 148B to 292B (depending on the level of security), with sub-130-byte public keys. That is the only PQC signature scheme today that even approaches the bandwidth profile of ECDSA, extremely attractive for blockchains, certificates, and firmware. The catch: isogeny-based cryptography is still young, signing is mathematically intricate, and side-channel hardening is an active research area. ⏩HAWK is essentially "Falcon without the floating-point." It is a lattice hash-and-sign scheme producing 555 B signatures at NIST-I (smaller than Falcon's 666 B) and can be implemented purely with integer arithmetic, a major engineering win. NIST has said the Round 3 review will last roughly two years and that any multivariate winners are unlikely to be standardized without yet another round. Realistically, the earliest a new signature standard will land alongside ML-DSA and SLH-DSA is 2028. The urgency to migrate has grown sharply, yet the current standards still have significant drawbacks, and this last-minute selection round, while necessary, collides head-on with the migration timeline.

Last week @Ledger N3XT — our education program across college campuses — went to Cambridge. Honestly one of the most inspiring parts was just spending time with students who are thinking this deeply and rigorously about identity, ownership, AI, privacy, and the infrastructure being built underneath all of it. 800 years of academic history, two days of conversations about digital identity, consent, and trust. We started with a fireside chat and Q&A. The students came prepared. One Masters student asked whether Ledger is evolving from securing assets into infrastructure for human identity — and whether that future protects choice or concentrates control. Not a casual question. A CS student pushed on quantum risk, identity, and why hardware matters at all in an increasingly AI-native world. His point was essentially: if intelligence becomes abundant and synthetic agents become indistinguishable from humans online, software alone stops being enough. At some point you need a physical root of trust tied to consent, identity, and verification in the real world. Then he moved to privacy: send someone £2 for coffee on-chain and they can potentially see everything you own. Those questions earned him a Ledger device. Most of the room got close. Dinner at The Cambridge Union turned into conversations about decentralised infrastructure for interplanetary settlement, synthetic identity verification, and agentic systems. Less “future of tech” panel talk, more people actively trying to work through the implications. The next day we toured Trinity’s Great Hall, the Wren Library, Newton’s apple tree. What stayed with me wasn’t the history so much as the continuity of the questions. How people establish truth. Authority. Consent. Ownership. We met with professors and students and started laying groundwork for deeper collaboration. Cambridge has a habit of stress testing ideas until they either collapse or sharpen. That’s useful. We’ll be back. ledger.com/blog-ledger-n3…

it's perfect! 🤩 #PorVida | @Ledger | #ad

SPURS WIN!!!!

WE ARE LOCKED IN SAN ANTONIO!!! Ready to make noise, we brought out the big guns! Thank you @Ledger and the @spurs as well as artist Shek Vega for helping us unveil the largest TIFO the NBA HAS EVER SEEN!!

So proud of the @ledger team for making clear signing on Ethereum a reality. They built in the open, brought together stakeholders across the ecosystem, and created the 7730 standard as a public good for Ethereum.

🚨 A new NPM supply chain attack is currently underway, specifically targeting the AI ecosystem, including packages related to Mistral AI, OpenSearch, Guardrails AI, and others. It hooks into Claude and VS Code environments to steal user credentials, including GitHub tokens. What makes this attack especially sneaky is its persistence mechanism. It deploys scripts that monitor whether the compromised GitHub token gets revoked. The moment revocation is detected, the malware retaliates by wiping the user’s home directory. This punitive behavior both disrupts remediation efforts and buys attackers more time to deepen the compromise. We are entering a new era where attackers are becoming dramatically more capable, and defending against them is growing more difficult every day.

This may just be the most important game of the year… so we are pulling out all the stops… Its time to MAKE NOISE AND LOCK IN SPURS FANS Tomorrow, 7pm, Frost Bank Center.

AI will be many things. But never human. The danger is not that machines will wake up. It is that we will forget the difference, then give them the legal and emotional machinery of personhood. I wrote about this for @RickRubin’s @tetranow 👇 : (image courtesy of @infiniteyay)

Wanted to take a moment to say thank you @Ledger . In our first year, they’ve stepped in and made things possible that otherwise wouldn’t be. We appreciate their genuine desire to help us build the atmosphere and keep Frost Bank Center Locked In.

moments like this can only happen when you genuinely want the same goal. @spurs and @Ledger are here for the fans. thank you @SpursJackals for the trust 🫡🔐

*taps the sign* (via @spurs)

Your AI agent may soon manage your money, sign your contracts, and speak on your behalf. So how do you prove it’s really YOU giving the orders? Cambridge Blockchain Society and @Ledger N3XT invite you to a workshop and fireside chat with @AWengroff Wengroff, VP of Marketing & Communications at Ledger, on Digital Private Property & Proof of Humanity. RSVP: luma.com/7i3ord21 📅 May 5 🕒 14:45–17:00 📍 King Street Brewhouse, Cambridge

AI is the engine, but verification is the steering wheel. We recently hosted the Ledger x OpenClaw meetup to dive into the world of autonomous agents. The energy was clear: everyone is building, but only a few are thinking about who actually owns the "intent." The takeaway? Superpowers are great. Staying in control of them is better.

The first to do it since Hakeem Olajuwon 💪 Portland shot just 8-for-42 (19%) on contested shots this series when Wemby was the defender.

Hackers: trying to get you to sign a malicious tx Clear Signing:

Congrats to the @Spurs 👏 Incredible team. Incredible vision. This is what happens when talent meets discipline. Proud to see a bit of 🇫🇷 shining on that stage. On to the next round. x.com/nba/status/204…

SPURS WIN SERIES, 4-1 🔥 THEY ADVANCE TO THE WESTERN CONFERENCE SEMIFINALS FOR THE FIRST TIME SINCE 2017!