Lectures

I do not have lecture notes, only slides. For background reading, probably the most similar course is read by Ivan Damgård or Berry Schoenmakers, see the links also for some other useful background material.

This year, I will have several changes compared to the last time (2016): the lectures on secure computation with BDD and threshold encryption (lectures 7 and 8 in 2016) will be replaced by lectures on SNARKs and XXX (where XXX is not decided yet). The lectures will be reordered: I will move lectures on the malicious model from the end of the lecture course to the middle due to their importance.

Individual lectures

Note: I use keynote to prepare slides. PPT version sometimes has problems with fonts, while pdf version lacks animations.

The following is the current plan for this semester and the concrete ordering might change. There will also be (not necessarily at the end of the lecture) the "16th lecture" on a topic not yet decided.

• Lecture 1 (10.09.2018): Introduction pdf (Updated: 12.09.18)
• Lecture 2 (17.09.2018): Assumptions. Discrete Logarithm pdf (Updated: 17.09.18)
• Lecture 3 (24.09.2018): DL. Key Exchange. CDH. DDH pdf (Updated: 23.09.18)
• Lecture 4 (04.10.2018): Elgamal. IND-CPA Security. Malleability pdf (Updated: 11.10.18)
• Lecture 5 (11.10.2018): Two-message homomorphic protocols pdf (Updated: 15.10.18)
• Lecture 6 (14.10.2018): Trapdoor discrete logarithm. Paillier pdf (Updated: 15.10.18)
• Lecture 7 (22.10.2018): Malicious Model: Concepts pdf (Updated: 28.10.18)
• Lecture 8 (22.10.2018): Sigma-Protocols pdf (Updated: 03.11.18)
• Lecture 9 (08.11.2018): Sigma-Protocols for DL Languages pdf (Updated: 14.11.18)
• Lecture 10 (15.11.2018): Getting Full Zero Knowledge pdf (Updated: 21.11.18)
• Lecture 11 (15.11.2018): Full ZK. Pairings pdf (Updated: 28.11.18)
• Lecture 12: (06.12.2018): Groth-Sahai Proofs. pdf (Updated: 5.12.18)
• Lecture 13: (10.12.2018): Lattice-Based Cryptography. (Lecture given and slides prepared by Behzad Abdolmaleki, *new*) pdf (Updated: 5.12.18)
• Lecture 14: SNARKs (*new*) pdf (Updated: 5.12.18)
• Lecture 15: Multi-party computation (*cancelled*)
• Lecture 16: Garbled circuits (*cancelled*)

2016 slides

(For lectures that were cancelled in 2018.)

• Lecture 7: Secure computation with BDD pdf pptx keynote (Updated: 10 Oct 2016)
• Lecture 8: Multi-round computation pdf pptx keynote (Updated: 24 Oct 2016)
• Lecture 9: Multi-party computation pdf pptx keynote (Updated: 1 Nov 2016)
• Lecture 10: Garbled circuits pdf pptx keynote (Updated: 1 Nov 2016)
  • L14 in 2015