Tootfinder

This is a gruelling summary of all the things wrong with OpenSSL https://www.haproxy.com/blog/state-of-ssl-stacks I've mostly watched this whole thing from the sidelines, but was also affected noting that private key parsing suddenly became 70 times slower. I think they've now …

The State of SSL Stacks
The SSL landscape has shifted dramatically. In this paper, we examine OpenSSL 3.x, BoringSSL, LibreSSL, WolfSSL, and AWS-LC with HAProxy.

Singularity Blockchain Key Management via non-custodial key management
Sumit Vohra
https://arxiv.org/abs/2506.02282 https://arxiv.org…

Singularity Blockchain Key Management via non-custodial key management
web3 wallets are key to managing user identity on blockchain. The main purpose of a web3 wallet application is to manage the private key for the user and provide an interface to interact with the blockchain. The key management scheme ( KMS ) used by the wallet to store and recover the private key can be either custodial, where the keys are permissioned and in custody of the wallet provider or noncustodial where the keys are in custody of the user. The existing non-custodial key management schem…

Threshold Signatures for Central Bank Digital Currencies
Mostafa Abdelrahman, Filip Rezabek, Lars Hupel, Kilian Glas, Georg Carle
https://arxiv.org/abs/2506.23294

Threshold Signatures for Central Bank Digital Currencies
Digital signatures are crucial for securing Central Bank Digital Currencies (CBDCs) transactions. Like most forms of digital currencies, CBDC solutions rely on signatures for transaction authenticity and integrity, leading to major issues in the case of private key compromise. Our work explores threshold signature schemes (TSSs) in the context of CBDCs. TSSs allow distributed key management and signing, reducing the risk of a compromised key. We analyze CBDC-specific requirements, considering t…

A "Wenlu" Brain System for Multimodal Cognition and Embodied Decision-Making: A Secure New Architecture for Deep Integration of Foundation Models and Domain Knowledge
Liang Geng
https://arxiv.org/abs/2506.00570

A "Wenlu" Brain System for Multimodal Cognition and Embodied Decision-Making: A Secure New Architecture for Deep Integration of Foundation Models and Domain Knowledge
With the rapid penetration of artificial intelligence across industries and scenarios, a key challenge in building the next-generation intelligent core lies in effectively integrating the language understanding capabilities of foundation models with domain-specific knowledge bases in complex real-world applications. This paper proposes a multimodal cognition and embodied decision-making brain system, ``Wenlu", designed to enable secure fusion of private knowledge and public models, unified proc…

Ich kann ihn nie finden, weil ich immer vergesse, wo er ist
https://chaos.social/@geheimorga/114587373962281476

Learning Recommender Mechanisms for Bayesian Stochastic Games
Bengisu Guresti, Chongjie Zhang, Yevgeniy Vorobeychik
https://arxiv.org/abs/2505.22979 https:…

Learning Recommender Mechanisms for Bayesian Stochastic Games
An important challenge in non-cooperative game theory is coordinating on a single (approximate) equilibrium from many possibilities - a challenge that becomes even more complex when players hold private information. Recommender mechanisms tackle this problem by recommending strategies to players based on their reported type profiles. A key consideration in such mechanisms is to ensure that players are incentivized to participate, report their private information truthfully, and follow the recom…

Oh dear. One of the contractors at work, working remotely, needs me to send him some secrets.
We have a well-documented team process for this, giving full instructions on how to create a public/private keypair and how to proceed from that point.
I have just received an email from him containing his private key ...

PrivacyGo: Privacy-Preserving Ad Measurement with Multidimensional Intersection
Jian Du, Haohao Qian, Shikun Zhang, Wen-jie Lu, Donghang Lu, Yongchuan Niu, Bo Jiang, Yongjun Zhao, Qiang Yan
https://arxiv.org/abs/2506.20981

PrivacyGo: Privacy-Preserving Ad Measurement with Multidimensional Intersection
This paper tackles the challenging and practical problem of multi-identifier private user profile matching for privacy-preserving ad measurement, a cornerstone of modern advertising analytics. We introduce a comprehensive cryptographic framework leveraging reversed Oblivious Pseudorandom Functions (OPRF) and novel blind key rotation techniques to support secure matching across multiple identifiers. Our design prevents cross-identifier linkages and includes a differentially private mechanism to …

Private Continual Counting of Unbounded Streams
Ben Jacobsen, Kassem Fawaz
https://arxiv.org/abs/2506.15018 https://arxiv.org/pdf/250…

Private Continual Counting of Unbounded Streams
We study the problem of differentially private continual counting in the unbounded setting where the input size $n$ is not known in advance. Current state-of-the-art algorithms based on optimal instantiations of the matrix mechanism cannot be directly applied here because their privacy guarantees only hold when key parameters are tuned to $n$. Using the common `doubling trick' avoids knowledge of $n$ but leads to suboptimal and non-smooth error. We solve this problem by introducing novel matrix…

Adaptive Chosen-Ciphertext Security of Distributed Broadcast Encryption
Kwangsu Lee
https://arxiv.org/abs/2506.10338 https://arxiv.or…

Adaptive Chosen-Ciphertext Security of Distributed Broadcast Encryption
Distributed broadcast encryption (DBE) is a specific kind of broadcast encryption (BE) where users independently generate their own public and private keys, and a sender can efficiently create a ciphertext for a subset of users by using the public keys of the subset users. Previously proposed DBE schemes have been proven in the adaptive chosen-plaintext attack (CPA) security model and have the disadvantage of requiring linear number of pairing operations when verifying the public key of a user.…