Jonas Thietke

One (Noisy) Bit to Rule Them All: Key Recovery from Randomness Leakage in ML-DSA

The Fiat-Shamir transform is one of the most widely applied methods for secure signature construction. Fiat-Shamir starts with an interactive zero-knowledge identification protocol and transforms this via a hash function into a non-interactive signature. The protocol’s zero-knowledge property ensures that a signature d...

Keep Track of Your Errors Solving ILWE and Improving Attacks on ML-DSA

Less Than a Bit to Rule Them All – Key Recovery from Randomness Leakage in ML-DSA