@matthew_d_green 80s/90s: millionaires buying dinner.00s/10s: sugar beet auctions.20s/beyond: ML-fueled technological dystopia where your every action is mined to maximize corporate profit. now with privacy!.

The program for the Simons MPC workshop is now available: See you there!.

CAREER award program completely cut,.GRFP cut 50%,.CISE cut 65%.

RT @StoffelMPC: When someone asks me if they should read "A Pragramatic Introduction to Secure Multiparty Computation" .

@JoyOfCrypto Be sure the play with the interactive proof visualization at the end. And here's a link to the very interesting workshop:

Here is a little writeup I prepared for the Computer Aided Security Proofs (CAPS) workshop at Eurocrypt, showing the CPA-security of hybrid encryption in the style of @JoyOfCrypto. It should give you a sense of what the upcoming web edition will be like!

Uh, thanks for citing my article I guess?

Interested in learning about PAKE? Jiayu Xu has posted his materials from a special topics course @

RT @socrates1024: @badcryptobitch @StoffelMPC most fun MPC since @GarbledCircus picked his screen name.

RT @badcryptobitch: Recently, many people have been nagging me about getting started with MPC. Here's a short list of resources that are b….

There will also be an open access edition of the book. Rather than a PDF, it will be a website whose killer feature is its interactive visualizations of hybrid security proofs. I can't wait for you to see it all!.

There will be new chapters on random oracles, ratcheting, authenticated key exchange, zero-knowledge (sigma protocols), and post-quantum.

I have just turned in the completed manuscript. The new edition is a complete rewrite from scratch, with all the improvements I've wanted to do for the past 5 years, and more.

Big announcement: The next edition of The Joy of Cryptography will be published by @mitpress!.

This question came up today because of a discussion I had with a grad student whose definition of "real-or-random" didn't match mine! I was confused why he would claim that real-or-random was equivalent to left-or-right. He said "Bellare & Rogaway proved it" and he was right!.

I was surprised to learn this, because I always thought "real-or-random" was a synonym for "IND$-xxx", which is option #2 in my poll. I'm glad to see that I'm not alone. This seems to be the more common modern meaning of "real-or-random.".

some context to this poll:. The term "real-or-random" was introduced in Bellare-Desai-Jokipii-Rogaway'97 They define it to mean option #1 in my poll.

"Real-or-random" security for encryption means which two things are indistinguishable?.

NIST workshop on privacy-enhancing cryptography (WPEC), kicking off Sep 24 with an entire day of private set intersection!.

RT @claudiorlandi: The next edition of Theory and Practice of Multi-Practice Computation (TPMPC) will take place in Bangalore March 3rd-6th….