Nostr notes by Léo Ducas 🇺🇦 ∀,≡,⊂

I'm guessing "not really". I interpret the quote as a ...

2025-04-29T05:05:05Z

In reply to nevent1q…m3vk
_________________________

I'm guessing "not really". I interpret the quote as a complaint that such a proof not providing enough insight as to "why" the two quantities should be equal. But I'd love access to the full text, I am pretty sure she has a more articulate point.

One of the major conference in cryptography issued the following ...

2025-04-13T03:20:41Z

In reply to nevent1q…sulm
_________________________

One of the major conference in cryptography issued the following statement:

https://crypto.iacr.org/2025/

"Given recent instances of US visa holders and residents being detained or deported by US immigration authorities, we understand that some members of our community may not feel safe traveling to the US for Crypto this year. We want to assure everyone that we will provide the option to present remotely. "

it is as if, each time I wake up, I've switched to a dumber ...

2025-02-12T03:41:31Z

In reply to nevent1q…ywrc
_________________________

it is as if, each time I wake up, I've switched to a dumber timeline. No more naps !

shouldn't we be surprised that a system of 3 stars manager to ...

2025-01-13T06:34:00Z

In reply to nevent1q…gjeu
_________________________

shouldn't we be surprised that a system of 3 stars manager to keep it's planets ? #3body

I use that quote (a bit too often) to reassure my students and ...

2025-01-11T02:45:01Z

In reply to nevent1q…6eup
_________________________

I use that quote (a bit too often) to reassure my students and mentees when they struggle at the first exposure to a new topic. For me it just mean: it takes time, but at some point you'll get it.

Voilà ! https://mathstodon.xyz/@ducasleo/113629418126414648 ...

2024-12-10T19:39:31Z

In reply to nevent1q…ztge
_________________________

Voilà !

https://mathstodon.xyz/@ducasleo/113629418126414648

Let's see if this commitment survives the holiday season. I've got all sort of excuse, including a baby and a young child to justify my laziness.

well, I'm considering comiting to a weekly post of mathy side ...

2024-12-10T03:42:21Z

In reply to nevent1q…vf6m
_________________________

well, I'm considering comiting to a weekly post of mathy side of lattice-based cryptography. I feel I am underusing this social media by mostly meming and ranting. Thanks for your question ;)

There are two many exemple to list, so here is my favorite one: ...

2024-12-09T21:01:18Z

In reply to nevent1q…emqw
_________________________

There are two many exemple to list, so here is my favorite one: the digital signature switcharoo.

A good basis $G$ of a lattice $L$ serves as secret key, a bad as public key. Using the good basis we can find close lattice point $s$ to arbitrary targets. This is how we sign a message $m$. The bad basis suffices to verify that $s \in L$ and $\|s-m\|$ is small.

WLOG (thanks to hash functions) we can assume that $m$ is uniform in the $\mathbb R^n / L$.

There is a catch. Do that naively, and signing to many messages leaks the secret key. The naive approach simply tile the space according to the parallelipiped $P = B \cdot [0,1]^n\). Every message signature pair gives a uniform point in $P$, and $P$ can be learned given enough such samples.

The fix is to resort to a careful rerandomization, using discrete gaussian. The tiling is replaced by an algorithm that select a lattice point according to a discrete gaussian centered at $m$: i.e. with probability proportional to $-\exp(\|s-m\|^2 / 2\sigma^2 )$.

Using the smoothness argument, we can show that this process, producing $m$ uniform and then $s$ is statistically close to something that does not depend on the Secret key. Namely, choose $s$ first, and set $m=s + e$ for $e$ a continuous gaussian. $e \bmod L$ is close to uniform, and so is $m \bmod L$.

These fast convergences play a key role for security proofs in ...

2024-12-09T19:14:11Z

In reply to nevent1q…6pd2
_________________________

These fast convergences play a key role for security proofs in lattice-based cryptography. There, they are rephrased as Gaussian distribution modulo a lattice $L$ quickly converging to the uniform distribution over the torus $\mathbb R^n/L$ as the variance increases (a property called smoothness).

But that's just 0, you don't even need unicode for that ...

2024-11-19T06:45:35Z

In reply to nevent1q…esl4
_________________________

But that's just 0, you don't even need unicode for that 🤔