Tjerand Silde

Tjerand Silde

@tjesi.bsky.social

Associate Professor in Cryptology and Research Group Leader at the NTNU Applied Cryptology Lab in Trondheim, Norway. Homepage: https://tjerandsilde.no Research group: https://www.ntnu.edu/iik/nacl-lab

348 followers347 following36 posts

Tjerand Silde reposted

We’re hiring up to 6 faculty in Cybersecurity at the CS Department, Aarhus University! All ranks, tenure-track Assistant to Full Professor. Broad scope: quantum, AI, cryptography, systems, languages, verification, and more. Come join us! Deadline: 14 Dec 2026. www.au.dk/om/stillinge...

au.dkAarhus University is hiring Cyber Security Professors for the Department of Computer Science, Aarhus Denmark - Ledig stilling på Aarhus UniversitetLedig stilling ved Institut for Datalogi, Aarhus Universitet

Tjerand Silde reposted

Over 400 academics in 30+ countries signed our open letter calling for immediate changes in AI development and deployment practices to ensure that cybersecurity incidents do not continue to occur, as future incidents will be far more damaging to our critical infrastructure.

Tjerand Silde reposted

Tjerand Silde reposted

We finally finished the universal signature forgery for 1024-bit RSA! 2^32 oracle queries, 1200 core years precomputation, 180 core years for an individual forgery, and 3 years of human labor (no AI involved) by Laura, Adam, Nadia, Emmanuel and me to pull of this computation against real HSMs.

Emmanuel Thomé@emmanuelthome.bsky.social

Forging 1024-bit RSA signatures in nearly SNFS time Hand over your HSM for some time, and we can forge signatures for its key. Arbitrary signatures. Forever. github.com/ucsd-hacc/NS...

Tjerand Silde reposted

We also bought EncroChat's original domain (encrochat.ch) --- it now hosts our paper and other info.

encrochat.chA Real-World Law-Enforcement Hack: The Case of Encrochat
Martin R. Albrecht@malb.bsky.social

Also, the article makes it sound as if our work is mostly concerned with the legal side of the Encrochat cases, but we gave a comprehensive technical account: eprint.iacr.org/2026/1319 We also discuss those open questions. We didn't have access to a device/image, limiting what we could establish.

Tjerand Silde reposted

Signal is the gold standard for secure messengers. We broke Signal’s integrity (twice) in this paper via message injection attacks. @kientuong114.bsky.social presented this week at #USENIX and he and Noemi will present it again at #WAC (Crypto workshop) this weekend. Catch their talk if you can!

Kien Tuong Truong@kientuong114.bsky.social

Just finished presenting this work at Real World Crypto in Taipei :) TL;DR: We found 2 attacks on Signal (Android, Desktop) where a malicious server can inject messages in conversations. Super fun project! Thanks a bunch to Noemi Terzo, @kennyog.bsky.social, and @cryptojedi.bsky.social

Tjerand Silde reposted

If you haven’t seen it, this new paper is great. They expand on a blog post I wrote that showed you could replay encrypted reasoning blobs from AI models. And they turned it into a full jailbreak. stolen-thoughts.com

stolen-thoughts.comStolen ThoughtsEncrypted chain-of-thought blocks returned by Anthropic, OpenAI and Google APIs are interchangeable across sessions, users and models. We exploit this to decode hidden reasoning at scale.

Tjerand Silde reposted

Introducing Automatic Key Verification! Complementing the existing safety number system, automatic key verification provides an additional, streamlined way to confirm the privacy of your chats. signal.org/blog/automat... TY @cloudflare.social and @trailofbits.bsky.social our independent auditors 💙🙏

signal.orgIntroducing Automatic Key VerificationSignal now offers a feature called “automatic key verification” which complements the existing safety number system. Signal is always end-to-end encrypted, and automatic key verification provides an a...

Tjerand Silde reposted

1/ Initial reactions after some hours with this groundbreaking result proving the NP-hardness of poly-approx CVP/NCP: It is most likely correct, but more importantly, it is original, elegant, and beautiful! (Also: it is easy to improve, quantitatively.) openai.com/index/ten-ad...

openai.comTen advances in mathematics and theoretical computer scienceOpenAI shares new results on long-standing open problems in mathematics and theoretical computer science, including advances in geometry, cryptography, and complexity.

Tjerand Silde reposted

Some initial thoughts, and a complicated mix of feelings. Wow. I mean, Erdos problems are cool (I genuinely mean that), I didn't know about the Jacobian conjecture before it got disproved. But this newest batch from OpenAI hits home in a way the previous announcements did not.

Tjerand Silde reposted

Yes, the result itself is very interesting (more on this below). From a skim, I agree with Noah that the paper is not well-written. Am I happy to see LLMs invade TCS? No, it's terrible. Is this the most impactful LLM result about lattices this week? Unclear. 1/

Clément Canonne@ccanonne.github.io

(same thing for @huckbennett.bsky.social and @noahsd.bsky.social , regarding the CVP one... If you have the time and energy of course!)

Tjerand Silde reposted

"We're all worried," as what it means to do research (in my field, Theoretical CS) seems to be shifting, and shifting fast. What to do? Senior researchers must lead by example, knowing that not everything will pan out. What I'm suggesting below may not work everywhere, but here's my own advice: 1/

Tjerand Silde reposted

*walks into room of mathematicians* Have you considered DOING A BREAKTHROUGH.

mr. TIM@timkellogg.me

the Dinitz-Garg-Goemans conjecture, a graph theory problem that’s gone unsolved for 30 years, was solved with this prompt

Tjerand Silde reposted

Every year we write about the exciting developments in post-quantum signatures. Last year didn't disappoint. But it's too late. As ekr wrote in 2024 "You go to war with the algorithms you have, not the ones you wish you had." ML-DSA will have to do for now. blog.cloudflare.com/ml-dsa-will-...

blog.cloudflare.comWhy we cannot wait for better post-quantum signature algorithmsNIST is advancing nine new post-quantum signature algorithms as potential candidates for future standardization. We take a closer look at all of them, and argue that while they are in the works and sh...

The deadline is coming up in two days!

Tjerand Silde@tjesi.bsky.social

We have two openings at our Department of Information Security and Communication Technology at NTNU: Associate Professor in Cryptographic Engineering: www.jobbnorge.no/en/available... Professor/Associate Professor in Mobile and Computer Networks: www.jobbnorge.no/en/available... Apply by June 12!

Tjerand Silde reposted

There are no technical or compliance reasons to double the size of symmetric keys in response to the threat of quantum computers. This common misunderstanding of Grover's algorithm risks wasting limited resources that should go towards deploying actually urgent post-quantum algorithms.

words.filippo.ioQuantum Computers Are Not a Threat to 128-bit Symmetric KeysThere is no need to update symmetric key sizes as part of the post-quantum transition, due to the details of how Grover's algorithm scales. Most authorities agree.

Tjerand Silde reposted

Two papers came out last week that suggest classical asymmetric cryptography might indeed be broken by quantum computers in just a few years. That means we need to ship post-quantum crypto now, with the tools we have: ML-KEM and ML-DSA. I didn't think PQ auth was so urgent until recently.

words.filippo.ioA Cryptography Engineer’s Perspective on Quantum Computing TimelinesThe risk that cryptographically-relevant quantum computers materialize within the next few years is now high enough to be dispositive, unfortunately.

Tjerand Silde reposted

Tjerand Silde reposted

I am very happy to announce that thanks to the hard work of many people (The "MIKE Team"), we now have a working implementation in SageMath of MIKE (Module Isogeny Key Exchange).

Tjerand Silde reposted

A team of computer scientists from the Applied Cryptography Group, including Matteo Scarlata, Professor Kenny Paterson, Giovanni Torrisi and Matilda Backendal, have discovered serious security vulnerabilities in three popular cloud-based password managers. Read more ⬇️

ETH Zurich@ethz.ch

Researchers from ETH Zurich have discovered serious security vulnerabilities in three popular, cloud-based password managers. During testing, they were able to view and even make changes to stored passwords. ethz.ch/en/news-and-...