In slightly more than a month better.codes (vis @nasqret!) introduced new ideas which have propagated through several papers: eccc.weizmann.ac.il/report/2…, followed by arxiv.org/abs/2609.05870, eprint.iacr.org/2026/2056, and eprint.iacr.org/2026/2048. Are there any others?

With the advent of 1) advanced AI to soon be followed by 2) quantum, security will never be the same. Signal employs some of the industry's best security engineers. Beyond this incident, how many bugs like this still lay *undiscovered* (or exploited) in production?

Before repeating “interpolation attack on 28 out of 31 rounds of Poseidon,” please read beyond the abstract. Look at which parameters are actually being attacked, then compare the claimed “partial round skipping” technique with the existing literature on partial rounds and subspace trails. I think the framing and novelty claims deserve quite a bit of scrutiny.

Every successful marketplace has winners and losers But some participants make it more of a dark forest than a chessboard We find some direct evidence for this — and some simple math to make these marketplaces more robust to rogue inference providers!

Practical Zero knowledge proofs would probably not have been developed pre-AGI if it wasn’t for Bitcoin

I, Ben, and the Irreducible team obsessed for years to make binary fields SNARKs happen, and I'm really proud that our work played a part in shaping Ethereum's direction. We were far from the only ones though. A few others whose work on binary fields pushed Binius forward

A new fast binary-field proving system is out: Flock by @benediktbuenz, @ronrothblum and @kleptographic. We'll be spending the next couple of weeks exploring whether it could be a good fit for proving post-quantum signature aggregation for Ethereum. 🤞 medium.com/@espressosys/we-j…

Introducing Flock: a new SNARK for proving batches of standard hash functions at just 250× the cost of computing them natively. Developed by @benediktbuenz from @EspressoSys, @ronrothblum, and NYU's William Wang, Flock puts Ethereum's Post Quantum target in reach.

🎙️ "ZK's vintage is ripe" @wyatt_benno of @icme_labs joins @AnnaRRose & @nico_mnbl to make the case. They cover ICME Preflight (ZK guardrails for agents), Jolt Atlas (verifiable ML inference), and what's next: lattices and isogenies for post-quantum succinctness. zeroknowledge.fm/podcast/403…

ECDSA is one of the most intellectually offensive constructions in modern cryptography. It's ugly. It's hard to thresholdize. Indeed, every research grant and venture capital dollar spent on it is, in a final sense, a theft from better cryptography.

More people should know about the Interfold. It's basically what I've been yelling at people to build with the MACI ideas ( ethresear.ch/t/minimal-anti-… ) for almost a decade, and now it exists, in a generalized form. The idea is: a privacy protocol optimized for things like voting (and other use cases eg. secret-ballot auctions). The mechanism generates a threshold encryption key, and people send in their votes onchain, using a ZKP to prove eligibility. An arbitrary computation on the votes gets run inside FHE, and then threshold-decrypted. From what I can tell (the docs are good docs.theinterfold.com/CRISP/… ), it gets pretty optimal security guarantees: * Voter anonymity can be made unconditional if eligibility is proven with ZK-SNARKs * Censorship resistance is guaranteed by ethereum (votes can be posted directly onchain, and there's a proof that all posted votes are taking into account) * The correctness of the outputted result can be ensured via ZK over FHE * Liveness and coercion resistance depend on M-of-N honesty; unavoidable given present-day technology The main limitation is that today "ZK over FHE" is only properly available for additive vote tallying, as it's too expensive for computations that involve multiplication or other more complicated manipulation at the moment. There's work in progress on slashing-based / optimistic computation for such situations. (And of course ideally in the long term we'd figure out obfuscation so you can get rid of the M-of-N committees😃)