Diego F. Aranha

truly a wild time to be alive when the cryptography world is split between those worried about quantum computers and those whose private key is “4”

Reviewer #2 (yeah, the infamous one) in 2006: "Post-quantum crypto? Is that a joke? Who in their sane mind would ever think of using that stuff? Reject!" Reviewer #2 in 2026: "Non-post-quantum crypto? Is that a joke? Who in their sane mind would ever think of using that stuff? Reject!"

The AI security task is no easy task, but we, 400+ scientists believe it must be tackled: ai-security-letter.org Not all here is easy (read, e.g., blog.cryptographyengineering.com/2026/09/30/i...), but it is something we must do.

Over 400 academics in 30+ countries signed our open letter calling for immediate changes in AI development and deployment practices to ensure that cybersecurity incidents do not continue to occur, as future incidents will be far more damaging to our critical infrastructure.

👀 nonfunctional.substack.com/p/passkeys-a...

News from #aarhuskrypto: welcome to associate professor Julius Hermelink! With Julius and @dfaranha.bsky.social, we now have a very strong core in crypto engineering and side-channel security, complementing decades of research in foundations and protocols. Welcome Julius!

Teenage Wasteland is a fantastic Netflix documentary, and so needed at this point in time.

Hey, look at this technology built by humans after training huge models on troves of data stolen from other humans running inference on GPUs and infrastructure built by humans, and even preserving the human biases present in the training data or creating all kinds of human drama! Let's call it AI.

News from #aarhuskrypto: we welcome postdocs LaKyah Tyner, Mahak Pancholi, Sebastian Hasler and Hamidreza Khoshakhlagh! users-cs.au.dk/orlandi/cryp...

Bora, turma! Experiência super bacana aqui no Brasil :)

Não sei como o governo consegue ter a cara de pau de discutir soberania e AI com esses valores desse jeito. Mals ae pelo fogo amigo

Ford has rehired hundreds of senior engineers after replacing them with AI backfired and has cost the company billions of dollars. AI adoption is blamed for Ford being the most recalled automaker in the U.S. with 51 recalls covering over 11 million vehicles in the first half of 2026 alone.

ISC 2026 submission deadline extended to July 2! Keynotes by Shweta Shinde and Diego Aranha. Submit your latest work in cybersecurity: isc2026.github.io 🇫🇷 Join us in Rennes this October — including a social event at Mont-Saint-Michel!

Today I learned that a *third* former student got accepted into a top grad program abroad as a direct consequence of my applied cryptography mentorship in Lebanon last year. Walking in Paris with my chest so puffed from pride that it’s pushing cars out of the way and denting buildings

Today is both: - First day of the summer semester of my applied cryptography course! WE'RE BACK BABY - Deltarune Chapter 5 is likely to be announced (during today's Nintendo Direct) TODAY IS A GOOD DAY

A list of principles put forth by mathematicians, for mathematicians and other researchers, regarding the use of AI in research. "Number #9 will surprise you!" leidendeclaration.ai

Hilarious and deeply insightful writing by @brianphillips.lol.

🇨🇦's #BillC22 is entering committee study this week - and we're hearing it may become law by end of the month. We never say this: but this is the worst, most privacy-breaking bill we've seen. It MUST be stopped. Speak up against it and read on to learn more: www.openmedia.org/StopC22-bsky 1/

the even more fun problem is, that because NL Wallet uses remote app attestation, it checks Googles servers for verification every time you use the app, meaning that Google holds a kill switch for our national ID wallet

A gentle introduction to lattice-based cryptography (Alfred Menezes) ia.cr/2026/1098

We are happy to host Stefano Tessaro (@stefanotessaro.bsky.social), Anja Lehmann, Gregor Seiler, and Sofia Celi (@claucece.bsky.social) as keynote speakers in addition to the contributed talks. Check out the abstracts here: privcryptworkshop.github.io/keynotes.html

Bingo! Do I win a prize now?

I'm looking for a PhD student to work with me on formal verification for cryptographic protocols. This is a 4-year position at VU Amsterdam, co-supervised with Kristina Sojakova. Send me an email if you want to know more!

It’s inaccurate to say Mario is brave and Luigi is cowardly Luigi is afraid of death, so he runs away from danger. Mario is afraid of living, so he runs towards death. Both brothers are cowards in their own way

There are only two bug classes left: complexity and memory safety. CurveBall (CVE-2020-0601)? Complexity. BigSig (CVE-2021-43527)? Memory safety. Log4Shell (CVE-2021-44228)? Complexity. BlueKeep (CVE-2019-0708)? Memory safety. Heartbleed looks like memory safety, but it's actually complexity.

We performed a security analysis of the LINE messenger in our latest paper, "LINE-Break: Cryptanalysis and Reverse Engineering of Letter Sealing", to appear in ACM ASIACCS’26. Joint work with Thomas Kingo Mogensen and Adam B. Hansen @csaudk.bsky.social. Full technical details at linebreak.info

Impossible to disagree with a single word that Ben Rhodes (Obama era NSC official) is saying here:

I should add to this: winner of best paper award at Eurocrypt 2026!! As a single author. During his PhD. Incredible achievement!(protip: he will graduate soon-ish 👀)

CC @janiceascari.bsky.social @rubensvalente.bsky.social @ritchieguy.bsky.social @dfaranha.bsky.social @camposmello.bsky.social @miriamleitao7.bsky.social @igorgadelham.bsky.social @dharazim.bsky.social @imont.bsky.social @shalders.bsky.social

Enjoy your April.... debrisprint.iacr.org

Fernando is looking for a PhD student www.iacr.org/jobs/item/4164 Fernando is excellent, you should consider applying.

Speaker Nikolas Melissaris talks about What Is Cryptography Hiding from Itself? by Diego F. Aranha and Nikolas Melissaris.

The room gets philosophical. Cryptography & Society chaired by Nick Sullivan ( @nicksullivan.org ): what is crypto hiding from itself? Security vs. interoperability? CRA policy? Proofs that aren't enough? And Nadim Kobeissi on teaching crypto in post-crisis Lebanon. #realworldcrypto