Andrea Basso

Andrea Basso

@andreavbasso.bsky.social

Postdoc researcher on isogeny-based and post-quantum cryptography at IBM Research🇨🇭

289 followers657 following58 posts

Andrea Basso
@andreavbasso.bsky.social

New paper out 🎉 We introduce a new UPKE based on FESTA that supports unbounded updates and whose security is equivalent to FESTA! Our main result: a (four-dimensional) variant of FESTA has uniformly random public keys, which means that any random walk is a valid pk update.

ePrint Updates@eprint.ing.bot

Updatable Public-Key Encryption from FESTA (Andrea Basso, Tako Boris Fouotsa, Fatna Kouider, Péter Kutas, Luciano Maino, Laurane Marco) ia.cr/2026/1014

Andrea Basso reposted

Luca De Feo
@bsky.defeo.lu

We still have a few spots left at MaGIC! Registration closes this week... Hurry up if you want to be on top of all the latest news on Cryptographic Group Actions! magic-workshop.github.io

magic-workshop.github.ioMaGIC 2026 - Marche Workshop on Group Actions in CryptographyA workshop dedicated to the study of cryptographic group actions, a rapidly evolving area at the intersection of algebraic geometry, number theory, and post-quantum cryptography. The workshop will bri...
Andrea Basso
@andreavbasso.bsky.social

We're organizing a workshop on cryptographic group actions bringing together the isogeny and code communities. The workshop is just before Eurocrypt, a quick train away from Rome in the beautiful Marche. Early registration ends this week, so grab your spot soon! magic-workshop.github.io

magic-workshop.github.ioMaGIC 2026 - Marche Workshop on Group Actions in CryptographyA workshop dedicated to the study of cryptographic group actions, a rapidly evolving area at the intersection of algebraic geometry, number theory, and post-quantum cryptography. The workshop will bri...

Andrea Basso reposted

Damien Robert
@damienrobert.bsky.social

I am very happy to announce that thanks to the hard work of many people (The "MIKE Team"), we now have a working implementation in SageMath of MIKE (Module Isogeny Key Exchange).

Andrea Basso
@andreavbasso.bsky.social

New paper out! 🎉 We translate the algebraic group model to the (generic) isogeny setting, generalising previous results that were limited to oriented isogenies (we show that any result that holds in the AGAM also holds in the AIM). Using this model, we obtain two important results:

ePrint Updates@eprint.ing.bot

The Algebraic Isogeny Model: A General Model with Applications to SQIsign and Key Exchanges (Marius A. Aardal, Andrea Basso, Doreen Riepel) ia.cr/2026/032

Andrea Basso
@andreavbasso.bsky.social

1. In the AIM, the Sigma protocol underlying SQIsign is sound without rewinding, which means we can show that SQIsign is provably secure in the QROM. 2. The CDH and DLOG problem for all SIDH-like key exchanges (M-SIDH, MD-SIDH, binSIDH, terSIDH, etc.) are equivalent in the AIM.

Andrea Basso reposted

ePrint Updates
@eprint.ing.bot

Using Learning with Rounding to Instantiate Post-Quantum Cryptographic Algorithms (Andrea Basso, Joppe W. Bos, Jan-Pieter D'Anvers, Angshuman Karmakar, Jose Maria Bermudo Mera, Joost Renes, Sujoy Sinha Roy, Frederik Vercauteren, Peng Wang, Yuewu Wang, Shicong Zhang, Chenxin Zhong) ia.cr/2025/1382

Andrea Basso
@andreavbasso.bsky.social

We (finally) published all the material from this course on SQIsign, including lecture slides and exercise sheets for the Sage laboratory. Available here: github.com/andreavico/S...

github.comGitHub - andreavico/SQIsign_summer_school: Slides and worksheets for the introductory course on SQIsign held in Trento in May 2025Slides and worksheets for the introductory course on SQIsign held in Trento in May 2025 - andreavico/SQIsign_summer_school
Andrea Basso@andreavbasso.bsky.social

Next week @lucianomaino.bsky.social and I will teach a week-long course on SQIsign at the University of Trento. The course will be both in-person and online: if you're interested, you can tune in Monday morning at 10:30 at unitn.zoom.us/j/88902079708 (details and full schedule in the image below)

Andrea Basso
@andreavbasso.bsky.social

Really cool post on DH!

Filippo Valsorda@filippo.abyssdomain.expert

"Finite field Diffie-Hellman is also just Elliptic Curve Diffie-Hellman, just over a curve that accidentally twisted itself a bit." From the “Cryptography (Incomprehensible)” category of @sophieschmieg.infosec.exchange.ap.brid.gy's blog. (If you don't know enough math for this, don't worry, same.)

keymaterial.netThere is no Diffie-Hellman but Elliptic Curve Diffie-HellmanWhen I first learned about Diffie-Hellman and especially elliptic curve Diffie-Hellman, I had one rather obvious question: Why elliptic curves? Why use this strange group that seems rather arbitrar…
Andrea Basso
@andreavbasso.bsky.social

Starting in half an hour!

Andrea Basso@andreavbasso.bsky.social

Next week @lucianomaino.bsky.social and I will teach a week-long course on SQIsign at the University of Trento. The course will be both in-person and online: if you're interested, you can tune in Monday morning at 10:30 at unitn.zoom.us/j/88902079708 (details and full schedule in the image below)

Andrea Basso
@andreavbasso.bsky.social

Isogeny-based signatures have consistently had a breakthrough every two years! Let's see what 2026 will bring... (Well, except for SQIsignHD that came a year too late, but that's probably because of Covid)

Andrea Basso
@andreavbasso.bsky.social

Great talks today about group actions at the Swissogeny Day by Lorenz Panny and Ryan Rueger! We’re planning to host the next Swissogeny Day in the summer, if you’d like to attend, reach out!

Andrea Basso
@andreavbasso.bsky.social

This workshop is gonna be great: cool people, interesting talks, and lots of great research on SQIsign and isogeny-based crypto. Mark it in your calendars! And if you’re going to Eurocrypt, this is going to be convenient: the workshop is just the week before, and it’s not too far from Madrid

Luca De Feo@bsky.defeo.lu

Fancy some isogeny crypto? Join us for a 3-day workshop on isogeny-based cryptography in Lleida, Catalonia, April 28-30 www.cig.udl.cat/icrypto2025_... Brought to you by ULleida's Cryptography+Graphs group, the SQIsign team and friends! Registration and program coming soon Registration is free!

Andrea Basso reposted

Kenny Paterson
@kennyog.bsky.social

It’s finally out - our 107-page analysis of key exchange in Telegram in which we proved (after massive effort) that the bespoke protocol is ok, if you’re willing to make some uncomfy assumptions on the home-grown KDF. With @malb.bsky.social, @eyalr0.bsky.social, Lenka Mareková and Igors Stepanovs.

ePrint Updates@eprint.ing.bot

Analysis of the Telegram Key Exchange (Martin R. Albrecht, Lenka Mareková, Kenneth G. Paterson, Eyal Ronen, Igors Stepanovs) ia.cr/2025/451

Andrea Basso reposted

kutasp89.bsky.social
@kutasp89.bsky.social

Happy to share this work with Paul Frixons, Valerie Gilchrist, Simon-Philipp Merz and Christophe Petit. We show that you have to be careful with new assumptions for cryptographic group actions. Namely for the CSI-SHARK assumption one can significantly beat Kuperberg using Childs-Van Dam

ePrint Updates@eprint.ing.bot

Another Look at the Quantum Security of the Vectorization Problem with Shifted Inputs (Paul Frixons, Valerie Gilchrist, Péter Kutas, Simon-Philipp Merz, Christophe Petit) ia.cr/2025/376

Andrea Basso reposted

kutasp89.bsky.social
@kutasp89.bsky.social

Excited to share this work on 2-dimensional KLPT which is joint work with Wouter Castryck, Thomas Decru, Abel Laval, Christophe Petit and Yan Bo Ti. This could pave the way for a 2-dimensional SQIsign and potentially other applications.

ePrint Updates@eprint.ing.bot

KLPT²: Algebraic Pathfinding in Dimension Two and Applications (Wouter Castryck, Thomas Decru, Péter Kutas, Abel Laval, Christophe Petit, Yan Bo Ti) ia.cr/2025/372

Andrea Basso
@andreavbasso.bsky.social

Really cool work showing that CSIDH is an *unrestricted* group action for *any* security level using HD representations! This is really exciting because many advanced constructions require an unrestricted group action, but until now all known constructions used params with shaky quantum security.

ePrint Updates@eprint.ing.bot

PEGASIS: Practical Effective Class Group Action using 4-Dimensional Isogenies (Pierrick Dartois, Jonathan Komada Eriksen, Tako Boris Fouotsa, Arthur Herlédan Le Merdy, Riccardo Invernizzi, Damien Robert, Ryan Rueger, Frederik Vercauteren, Benjamin Wesolowski) ia.cr/2025/401

Andrea Basso
@andreavbasso.bsky.social

As part of the round-2 NIST submission, we developed a complete proof of security of SQIsign!

ePrint Updates@eprint.ing.bot

A Complete Security Proof of SQIsign (Marius A. Aardal, Andrea Basso, Luca De Feo, Sikhar Patranabis, Benjamin Wesolowski) ia.cr/2025/379

Andrea Basso
@andreavbasso.bsky.social

All previous HD versions of SQIsign only proved security in special ad-hoc models. Here, we finally give the first proof in the ROM: we also introduce a generic framework, reduce the security to non-interactive assumptions, and obtain several interesting results on the way.

Andrea Basso reposted

Boris Fouotsa
@borisfouotsa.bsky.social

16th International Conference on Cryptology AFRICACRYPT 2025 July 21-23, 2025 – Rabat, Morocco 🇲🇦 Extended submission deadline in 1 week: africacrypt2025.sciencesconf.org Submit your best results ! See you in Rabat 🇲🇦 in July 2025.

africacrypt2025.sciencesconf.org16th International Conference on Cryptology, Africacrypt 2025 - Sciencesconf.orgAfricacrypt 2025 is organized by the ENSIAS College of Mohammed V University in Rabat with partnership of the General Directorate of Information Systems Security (DGSSI), Morocco.