Publications

3

Peer-Reviewed
Papers

0

Further NIST PQC
Submissions

0

NIST PQC Standards
Co-Authored

1

Patents in
Process

0

Mature Products
Developed

0

Best Paper
Awards

SPOTLIGHT PUBLICATION | 27/03/2025

Episode 2: The Quantum-Safe Playbook: How Signal Protected Billions with a Lean Team

Quantum risk is a business risk—and Signal Messenger isn’t waiting for quantum computers to arrive. In this episode of Shielded: The Last Line of Cyber Defense, Johannes Lintzen welcomes Rolfe Schmidt, Research Engineer at Signal Messenger, to explore how one of the world's most privacy-focused messaging platforms implemented post-quantum cryptography—even with a lean team.

Formal Verification – why does it matter for PQC?

Formal verification has become increasingly important in the realm of cryptographic primitives, which serve as the foundational elements of secure communication systems. As cryptographic algorithms underpin the confidentiality, integrity, and authenticity of digital information, any flaw in their implementation can lead to catastrophic security breaches.

Episode 1: Inside Cloudflare’s Post-Quantum Journey: Bas Westerbaan on Real-World Implementation

Is your organization truly prepared for the post-quantum era? In the premier episode of Shielded: The Last Line of Cyber Defense, host Johannes Lintzen is joined by Bas Westerbaan, Research Engineer at Cloudflare, to discuss why organizations must act now on post-quantum cryptography, how to navigate the two-phase migration process, and how to overcome key management, compliance, and performance challenges.

Filter by:

How Multi-Recipient KEMs can help the Deployment of Post-Quantum Cryptography

The main purpose of this work is to raise awareness about a primitive that can provide large efficiency gains in post-quantum cryptography: multi-recipient KEMs, ormKEMs.

Optimizations and Practicality of High-Security CSIDH

In this work, we assess the real-world practicality of CSIDH, an isogeny-based non-interactive key exchange.

Practical Round-Optimal Blind Signatures in the ROM from Standard Assumptions

In this work, we present two round-optimal blind signatures under standard assumptions in the ROM with different approaches: one achieves the smallest sum of the signature and communication sizes, while the other achieves the smallest signature size.

Antrag: Annular NTRU trapdoor generation

In this paper, we introduce a novel trapdoor generation technique for Prest's hybrid sampler over NTRU lattices.

Cryptanalysis of the Peregrine Lattice-Based Signature Scheme

In this paper, we show that Peregrine, one of the candidates in the ongoing Korean post-quantum cryptography competition, is no exception, by demonstrating a practical key recovery attack against it.

An Improved Threshold Homomorphic Cryptosystem Based on Class Groups

We present distributed key generation and decryption protocols for an additively homomorphic cryptosystem based on class groups, improving on a similar system proposed by Braun, Damgård, and Orlandi at CRYPTO '23.

Mask Compression: High-Order Masking on Memory-Constrained Devices

In this work, we introduce mask compression. This conceptually simple technique is based on standard, non-masked symmetric cryptography.

An Efficient and Generic Construction for Signal’s Handshake (X3DH): Post-quantum, State Leakage Secure, and Deniable

The Signal protocol is a secure instant messaging protocol that underlies the security of numerous applications such as WhatsApp, Skype, Facebook Messenger among many others.

Breaking Parallel ROS: Implication for Isogeny and Lattice-based Blind Signatures

In this work, we provide a simple and novel attack on blind signatures based on identification protocols performing parallel repetition to reduce the soundness error.

New Whitepaper: “The new NIST standards are here: what does it mean for PQC in 2024?”

Yesterday NIST published their finalized post-quantum cryptography (PQC) standards. This paper discusses the standards in more detail and what comes next.

CV2EC: Getting the Best of Both Worlds

Converting CryptoVerif models to EasyCrypt: getting the best of both worlds.

Adaptively Secure 5 Round Threshold Signatures from MLWE/MSIS and DL with Rewinding

T-out-of-N threshold signatures have recently seen a renewed interest, with various types now available, each offering different tradeoffs. However, one property that has remained elusive is adaptive security.