l.e.a.

Web servers need better tools to manage agentic traffic. Fortunately, we can build these tools in a way that protects the privacy of the human in the loop. blog.cloudflare.com/private-rate-l…

Anonymous credentials are going to have a big year. In the realm of "fancy" cryptography, they're perhaps the most important primitive we'll need to make PQ. Where do we stand? Lena Heimberger spent part of the summer finding out. blog.cloudflare.com/pq-anonymous-c…

Cloudflare is launching an experiment with Chrome to evaluate fast, scalable, and quantum-ready Merkle Tree Certificates, all without degrading performance or changing WebPKI trust relationships. cfl.re/42YD7Ua

Agents need credentials that protect the privacy of the users behind them. Read more about it blog.cloudflare.com/private-rate-l… Joint work with Lena Heimberger, @cjpatton_, and @thibmeu at @Cloudflare

Working on anonymous credentials? In this blog post @cjpatton_ and @unlocking_lox tells about the state of Post-Quantum credentials. blog.cloudflare.com/pq-anonymous-c…

We're sharing our new research on converting multiple key-dependent attacks into universal attacks. This work comes with open-source implementation tools and GPU-accelerated experiments to support reproducibility: Paper: ia.cr/2025/1996 github.com/hadipourh/univ…

Interested in physical side-channel attacks? Check out our open position: jobs.apple.com/en-us/details/…

@NanakNihal @TACEO_IO Not trivially(the rounding seems to be more involved), but we are looking into it!

@TACEO_IO This is awesome! Is it amenable to threshold schemes to distribute the server, like 2HashDH is?

OPRFs are one of the most widely used privacy tools, but they’re under threat from developments in quantum chips. In this work we present Leap, a lattice-based OPRF using MPC tools (OT, OLE) for post-quantum security—fast eval (<1ms) & efficient PSI. Joint work with @isec_tugraz, Trento, and AIT. To appear at @IACReurocrypt 2025. eprint.iacr.org/2025/333.pdf

Leap: New post-quantum oblivious pseudorandom function (OPRF). OPRF is a 2PC between a server which holds a secret key, and a client who provides input. The server learns neither the input nor the output. The client doesn’t learn the key.

Since we obliviously evaluate the heuristically-secure OPRF SPRING, the PRF part of the OPRF is also blazingly fast. This gives rise to efficient post-quantum computation that could potentially beat classical computation.

My personal favourite contribution is that we show that lattice-based OPRFs are faster than the elliptic-curve based 2HashDH construction. Our proof-of-concept implementation (though unoptimized and non-constant-time for now) shows promising computational efficiency.

Our paper Leap: A Fast, Lattice-based OPRF With Application to Private Set Intersection is finally public (eprint.iacr.org/2025/333) and will be presented at #IACR Eurocrypt 2025!

@vxunderground Pls

Giveaways left in the queue... we've gotta get through all of these before Christmas, we gotta pick up the speed - Sektor7 Malware Development Essentials Course - Sektor7 Malware Development Intermediate Course - Sektor7 Malware Development Advanced Vol.1 - Hands-On KQL for Security Analysts (x5) - TorGuard VPN 1 year subscription (x10) - xG3 Injectable Biomagnet v2 - The Definitive Guide to KQL (eBook) (x10) - Certified Red Team Professional (x3) - Certified Red Team Expert (x3) - Certified Azure Red Team Professional (x3) - Malcore Lifetime Reverse Engineer Plan (x10) - 1336_0ff_by_0ne malware graphic shirts (x12) - $150 of vx-underground merch - $15,000 of cash giveaways - Certified Cyber Security Engineer (x5) - Enterprise Security Controls Attack Specialist (x10)

@vxunderground @HackerStick3rs Pls

Hi, it's giveaway number next (???) Our friends at @HackerStick3rs hooked us up with 75 cybersecurity stickers. Each winner will be mailed 5 very cool stickers. Very cool. If you'd like to have some stickers for your stuff, leave a comment below. - Winners will be selected randomly in the next 24 hours. - We will DM winners. - If you do not confirm your win in 24 hours a new winner will be selected - If your DMs are closed, you automatically forfeit your prize Have a nice day

@vxunderground @mrgretzky Pls

Hi, it's tuts-for-nerds giveaway 6. (we movin' 'n' groovin') Our friend @mrgretzky hooked us up with 12 vouchers for the Evilginx Mastery course. Initially we were supposed to do this 12 does before Christmas, but we're swamped. Please forgive us, Kuba. I love you. If you'd like to master Evilginx, leave a comment below - Winners will be selected randomly in the next 24 hours. - We will DM winners. - If you do not confirm your win in 24 hours a new winner will be selected - If your DMs are closed, you automatically forfeit your prize Have a nice day

@blueminimal That being said, I'm not sure how helpful I'll be: I have no experience there and never participated in the ACSC(both years I wanted to had stalking challenges).

@blueminimal Usually acknowledgment of previous errors is a good start ;) that being said if you actually want to chat I'm sure the people from Graz can help you with my contact details if you don't have them.

futurezone.at/digital-life/a… Periodische Erinnerung dass das Problem von wenigen weiblichen* Teilnehmerinnen bei der ACSC nicht nur die aggressive Kommunikation ist sondern dass mehrere Jahre die Qualifikation Challenges mit Stalking (zb Datenbank für Handynummer hacken) enthalten hat

MS-DOS comments 🔥🔥🔥