Lectures
The lecture slides will appear here sometime before (or perhaps after... hopefully before) the lecture.
- August 31st (plus some extra exercises for the first week).
- On September 7th, we will check out the ProVerif protocol analyser. Please have it installed on your computers. The lecture slides are here.
- On September 14th, we take a look at protocol properties beyond secrecy and authenticity. We will use a number of scripts from ProVerif's examples folder to demonstrate the theory. We will also speak a little about the Tamarin prover and show it in action. We showed this and this model of the key-exchange protocol that has served as our "main" example.
- On September 21st, there will be no physical meeting. Please check out the recording (in BBB) of a practical meeting from September 22nd, 2021.
- On September 30th, we start with secure multiparty computation. We will do exercises in proving the security of the constructions for oblivious transfer. The whole lecture will be very similar to the ones in previous years.
- On October 5th, we will take a look at secret sharing and protocols based on that. We can also return back to the various constructions of oblivious transfer in previous week's slides, and try to prove their security against passive adversaries. Well, we did not look into OT constructions, but we talked about OT extension.
- On October 12th, we will talk about actively secure multiparty computation (including this proof). The intent is to show an actively secure scheme based on secret sharing.
- On October 19th, the plan is to talk about actively secure garbled circuits, and about SPDZ. Maybe we also look at MPC based on homomorphic encryption. At the lecture, we could not get BigBlueButton to satisfactorily work, hence this lecture will be available as a Zoom recording.
- On October 26th, we'll do an exercise session with all the exercises from previous weeks. The meeting will be virtual.
- On November 2nd, we will talk about different protocols that achieve their active security by replicating certain parts of it. We will also talk about some recent techniques for preprocessing with reduced communication costs.
- Starting from November 9th, we will talk about Zero-knowledge proofs. Here is an example of the GKR protocol in the form of a Jupyter notebook using OCaml (also as pdf). We will probably need four weeks to cover this material, during which the content of slides may slightly change.
- On November 9th, the lecture hall is not available for us. We will do the lecture in Cybernetica's office. As we could not get BigBlueButton's audio working there, the recording is again available as a Zoom recording (this time with good resolution for the whiteboard).
- Here is the Zoom recording for 16th of November.
- Here is the Zoom recording for 23rd of November.
- The recording of the lecture from 30th of November is in BBB.
- Here is the Zoom recording for 7th of December.
- After the lectures about ZK proofs, there was a lecture about translating programs into MPC protocols or ZK proof statements.
- There won't be a meeting on December 14th.