IACR News
If you have a news item you wish to distribute, they should be sent to the communications secretary. See also the events database for conference announcements.
Here you can see all recent updates to the IACR webpage. These updates are also available:
04 May 2021
The Knowledge Hub Universities
Closing date for applications:
Contact: Karim.ghaleb@elsewedyedu.com
More information: https://careers.tkh.edu.eg/en/egypt/jobs/head-of-school-computing-4286023/
02 May 2021
Rabdan Academy (Government Sector) - Abu Dhabi - UAE
Closing date for applications:
Contact: Mr. Amir Adel - Recruitment Specialist
More information: https://ra.ac.ae/
Université de Picardie Jules Verne, Amiens, France
Closing date for applications:
Contact: Sorina Ionica
More information: https://home.mis.u-picardie.fr/~ionica/postcryptum/Welcome.html
Seconize Technologies
Closing date for applications:
Contact: Sashank Dara
29 April 2021
IBM Research, Zurich
The ideal candidate should have:
This position is funded by a European ERC project, and all its output will be open source and patent-free. So a positive attitude towards contributing to the open source community is also a requirement.
The IBM research lab is located in Ruschlikon, a lakeside town that is reachable in 10 minutes by direct public transport from central Zurich. English is the working language at the lab, and it is also widely understood and spoken in Zurich and its surrounding regions.
The group offers very good working conditions, with the majority of our time being spent purely on research activities. It is also currently one of the leading research groups in quantum-safe cryptography, with some of its members (Luca de Feo, Vadim Lyubashevsky, and Gregor Seiler) significantly contributing to the invention, design, and implementation of several finalists in the ongoing NIST post-quantum standardization effort.
To apply, please include a C.V., a brief motivation letter, and the names and email addresses of two references. If you have contributed to open source projects, please include a link to the repository and a brief explanation of your role. The starting date is flexible, but the sooner the better.
Closing date for applications:
Contact: If interested, please send the application to: Vadim Lyubashevsky; vad@zurich.ibm.com; with "ZK APPLICATION" as the subject line
28 April 2021
University of Klagenfurt, Austria
The Cybersecurity research group, headed by Elisabeth Oswald, is a relatively new group established in Austria's sunny south. The group currently features a diverse range of members (from France, Iran, India, and China). Current members work on topics such as leakage profiling, advanced leakage simulators, attacks (utilising deep learning), statistical foundations, and hardware aspects of side channels. The group receives funding from the ERC, as well as local funding, and thus offers a supportive research environment (both financially as well as from a human perspective).
The group is looking to grow by two more members: one post doc and one doctoral student. The group is particularly keen to expand their existing coverage of topics and seeks researchers with an interest in
- compilers/languages to support the secure implementation of cryptographic primitives
- machine/deep learning
- secure implementations w.r.t. the RISC-V instruction set
A good candidate for the Post-doc position will have some existing publications in relevant venues (IACR conferences or workshops, journals, or system security venues), enjoy working with people in an international context, and love water, sun, and mountains.
A good candidate for the PhD position will have a background in either computer science, maths, or statistics (an MSc level degree is required), will ideally have done some project in a crypto/security related topic, enjoy working with people in an international context, and love water, sun, and mountains.
The funding for the Post-Doc Position is available until 31.08.2023. The funding for the PhD position is for 40 months. Rates are set according to a standard collective agreement for such positions (Kollektivvertrag), but the salary for the Post-Doc position can be adjusted depending on previous experience.
Don't hesitate to get in touch with Elisabeth Oswald for informal enquiries, or to apply!Closing date for applications:
Contact: Please contact Elisabeth . Oswald @ aau . at
More information: http://www.cybersecurityresearch.at
26 April 2021
Graz University of Technology, Graz, Austria
The postdoc position is part the research group of Stefan Mangard. The position is dedicated to basic research in the context of the TU Graz-SAL Dependable Embedded Systems Lab (DES Lab) that aims for new methods for zero-bug software and dependable AI. In the DES Lab she/he will collaborate with SAL (https://silicon-austria-labs.com) and a team TU Graz researchers in the field of cybersecurity, machine learning, formal methods, and embedded systems.
The position offers:
Required Qualifications:
Please send your applications to applications.csbme@tugraz.at while adding the reference: 7050/21/005.
Deadline for the application: May 27th 2021
Closing date for applications:
Contact: In case of questions, feel free to contact Stefan Mangard via email Stefan.Mangard@iaik.tugraz.at.
More information on the DES Lab: https://research-network.silicon-austria.com/des-lab/
University of Luxembourg
The post-docs will be members of the Security and Trust (SnT) research center from the university of Luxembourg (>200 researchers in all aspects of IT security). We offer a competitive salary (about 60,000 euro/year gros). The duration of the position is 2.5 years.
Profile: a PhD in cryptography, with publications in competitive cryptographic conferences
Closing date for applications: June 30th, 2021. We encourage early applications.
Closing date for applications:
Contact: Jean-Sebastien Coron - jean-sebastien.coron at uni dot lu
More information: http://www.crypto-uni.lu/vacancies.html
22 April 2021
IAI, TCG CREST
Research Area: Our current Research focus includes Cryptography, Quantum Computing, Cyber Security, Mathematics and its Applications, Machine Learning, and Artificial Intelligence.
Eligibility: All students passed or in their final semester pursuing M.Tech / M.E / M.Stat / M.Math / M.Sc or equivalent degree in Computer Science, Information Technology, Electronics, Mathematics, Data Science, Statistics or other areas of quantitative sciences may apply.
Fellowship: All successful candidates will be offered a TCG CREST fellowship of Rupees Sixty Thousand (60,000.00 INR) per month. Also, a contingency grant of up to Two Lacs (2,00,000.00 INR) will be awarded per annum.
Admission Process: The online application process for Ph.D. admission is open and will be valid up to 17th May 2021. Interested candidates are requested to apply online by filling up the application form provided on the admission page (the link is given below). All other necessary details are also available therein.
Admission Page: https://www.tcgcrest.org/announcements/iai-phd-programme-2021/
Closing date for applications:
Contact: Nilanjan Datta
More information: https://www.tcgcrest.org/announcements/iai-phd-programme-2021/
Joint Research Centre; Cyber and Digital Citizens' Security Unit; Ispra, Italy
A Contractual Agent position FG IV in Ispra, Italy. 36 months initial contract with possible renewals up to maximum 6 years. The successful candidate will contribute to the activities of the unit aiming at strengthening the citizen’ security and privacy by exploring innovative forensic technologies to support the fight against organised crimes.
He/she will conduct scientific and technical studies in the area of cybersecurity and fight against cyber-dependent crime domains to support the new strategic agenda 2019-2024 and its first priority: Protecting citizens and freedoms.
ELIGIBILITY:To be eligible for the position, the candidate must be on a valid EPSO reserve list for Function Group IV contract staff.
Candidates who are on a valid EPSO reserve list or have applied to an EPSO selection procedure can apply to this specific position through http://recruitment.jrc.ec.europa.eu/?type=AX.
WE LOOK FOR:The candidate shall have a PhD degree - or a minimum of 5 years of full-time research or working experience after the first University degree giving access to PhD studies in the field of applied mathematics, cryptography, computer science, or machine learning and deep learning techniques, or similar.
Solid knowledge and experience are required in:
- Mathematics and more particularly cryptography or multi-linear algebra;
- Machine learning and deep learning;
- Ability to work in a multilingual and multicultural environment;
- English language, at least C1 level both oral and written.
The following knowledge or experience are an asset:
- Experience with digital forensic techniques;
- Experience with High-Performance Computing platform;
- Good knowledge of programming languages such as C/C++/C#, Python, MATLAB;
- Knowledge of quantum programming and simulation;
- Knowledge of machine learning libraries such as OpenCV, libSVM, Tenfosorflow/Theano/Keras;
- Relevant publications in peer-reviewed journals and international security conferences;
Closing date for applications:
Contact:
How to apply to an EPSO selection procedure? Apply either to the permanent EPSO call https://epso.europa.eu/documents/2240_en or a specialised call for researchers https://ec.europa.eu/jrc/en/working-with-us/jobs/vacancies/function-group-IV-researchers
laurent.beslay@ec.europa.eu
More information: https://recruitment.jrc.ec.europa.eu/showprj.php?type=A&id=1961
LTCI, Télécom Paris, Institut polytechnique de Paris, France
Billions of connected devices are in use nowadays, including smartphones, media tablets, laptop and desktop computers, automotive electronic control units, smart sensors, smart cards, etc. To guarantee the confidentiality, the integrity and the authenticity of their sensitive data, various security mechanisms have been specified, and some of them mathematically proved to be secure, particularly against linear cryptanalysis and differential cryptanalysis. However, implementing them on a digital circuit without introducing vulnerability still remains a challenge.
The most exploited vulnerabilities are implementation bugs, as well as side channels, which leak information such as the execution time of a sensitive operation. The two vulnerability classes can also be combined: for instance, Meltdown (CVE-2017-5754) and Spectre (CVE-2017-5753) simultaneously exploit a hardware bug and a measure of the data cache access time.
Since 2016, artificial intelligence, and more precisely deep learning using neural networks, has been used to evaluate the resistance level of countermeasures against side-channel attack. Thus, an AES implementation protected by secret sharing based on Boolean masking has been shown insecure, as well as desynchronization, two countermeasures yet known to be very effective. Regarding public key cryptography, some vulnerabilities have also been identified in RSA implementations protected by blinding of the message, of the secret exponent and/or of the modulo.
Artificial intelligence is therefore a valuable aid in identifying vulnerabilities, the use of which has to be extended, to algorithms other than AES and RSA, but above all to other countermeasures such as register randomization, internal state randomization, modular operation re-randomization, etc. This is the first objective of the thesis. Additionally, although already very effective, it seems possible to further improve analyzes by neural networks, by using several intermediate values, and/or several side channels (time, electromagnetic radiation, etc.). This is the second objective of the thesis.
Closing date for applications:
Contact: Laurent Sauvage
More information: https://www.adum.fr/as/ed/voirproposition.pl?langue=&site=TelecomPT&matricule_prop=36276
The Hong Kong University of Science and Technology
Applicants’ profile
- MSc or BSc degree in Computer Science or related field.
- Excellent programming skills, preferably in C++.
- Very good understanding of CS fundamentals: algorithm analysis, data structures, etc.
- Good understanding of basic cryptographic primitives: hashing, encryption, commitments, etc.
- Strong enthusiasm about research.
Work environment
HKUST offers guaranteed funding for the PhD duration with competitive stipends. Our CSE department was ranked 17th in the world in 2020 by THE World University Rankings. Our graduates typically produce research output of the highest quality and consistently staff world-class institutions. The lab offers a creative work environment that is ideal for excellent research.
Closing date for applications:
Contact: Dimitrios Papadopoulos
Northwestern University
- Secure multi-party computation
- Zero-knowledge proof
- Post-quantum security
- Differential privacy
- Other related/non-related topics of mutual interests
Apply: please send your CV (and other material if available) to the PoC.
Closing date for applications:
Contact: Xiao Wang (wangxiao1254@gmail.com)
15 April 2021
Subspace Labs | SFBA & Remote
Responsibilities
- Become a leading contributor and core maintainer of the Subspace Network
- Implement a series of novel consensus, execution, and scalability proposals
- Maintain the highest standards of distributed open-source software development including modular design, comprehensive testing, proper documentation, and responsive support.
- Experience with current blockchain technologies and landscape
- Theoretical background in distributed systems, such as consensus algorithms, as well as cryptographic fundamentals
- Strong knowledge of a modern systems programming language, such as Rust, C++, or Go and willing to learn Rust.
- Experience working with large open-source codebases
- Familiarity with the Rust language and its ecosystem
- Familiarity with Substrate and the Polkadot ecosystem
- Experience implementing blockchain consensus protocols
- A passion for decentralized, peer-to-peer systems and Web3 technologies
- A remote work environment with a high degree of autonomy and agency
- You will play a critical role in implementing a new layer one blockchain
- Salary and options befitting an early hire at a venture-backed startup
Closing date for applications:
Contact: Jeremiah Wagstaff
More information: https://jobs.lever.co/subspacelabs/7f6a654b-60a8-4740-aa19-36b9f7a9e624?lever-origin=applied&lever-source%5B%5D=IACR%20Jobs
LTCI, Télécom Paris, Institut polytechnique de Paris, France
Guaranteeing the confidentiality of sensitive information held or communicated by an object involves the use of various security mechanisms, such as authentication or encryption. These mechanisms rely on cryptographic algorithms that are secure from a mathematical point of view, but whose physical implementation may contain vulnerabilities that can be exploited by a malicious person. For instance, reducing the supply voltage or increasing the clock frequency of an integrated circuit beyond the limits for which it has been designed is a mean to introduce faults into its operations. It is then possible at low cost to recover all or part of the data memory, to bypass checks of passwords or access rights.
These attacks, called fault injection attack (FIA), are carried out in practice using a laser beam or a near-field probe radiating a pulsed electromagnetic field. Numerous FIA countermeasures have been proposed, mainly based on redundancy, and considering one injection faulting only one single sensitive variable. However, we have recently shown that a single injection could fault several successive assembler instructions, and consequently several variables, and it is also known that several injections, also faulting several variables, can be carried out.
This questions redundancy as a protection strategy, with software counter-measures, or even hardware counter-measures such as memory with error correcting code, or dual-core processor in lockstep mode. The first objective of the thesis is evaluating the resistance of this kind of protection, first in a practical way, then using preferably static simulations, or dynamic ones. The second objective is evaluating, and if necessary improving, resilience-based countermeasures, in particular infective countermeasures.
Closing date for applications:
Contact: Laurent Sauvage
More information: https://www.adum.fr/as/ed/voirproposition.pl?langue=&site=TelecomPT&matricule_prop=36459
IMDEA Software Institute
Applications are invited for one PhD student position at the IMDEA Software Institute (Madrid, Spain). Selected candidates will work with Marco Guarnieri (https://mguarnieri.github.io, marco dot guarnieri at imdea dot org) on the testing (specifically fuzzing) and verification of hardware-level defenses against microarchitectural attacks. The specific topic of the research will be determined based on the common interests of the candidate and the supervisor.
Who should apply?
Ideal candidates have earned (or are in their last year of) a Master's degree in Computer Science, Computer Engineering, or Mathematics, with experience and interest in at least one of the following areas:
- Computer security
- Testing (and fuzzing in particular)
- Computer architectures
- Program analysis and verification
- Formal methods
- Logics
Working at IMDEA Software
The IMDEA Software Institute is ranked among the best European research institutes in the areas of Programming Languages and Computer Security. Located in the Montegancedo Science and Technology Park, it perfectly combines the sunny and vibrant city of Madrid with cutting edge research and inspiring working environment. The institute provides an internationally competitive stipend, access to an excellent public health care system, unemployment benefits, retirement benefits, and support for research related travel. The working language at the institute is English. Knowledge of Spanish is not required.
Dates
The duration of the position is intended to be for the duration of the doctoral studies. The ideal starting period is summer/fall 2021. Deadline for applications is April 30th, 2021. Review of applications will begin immediately, and continue until the positions are filled.
How to apply?
See http://software.imdea.org/open_positions/2021-04-phd-uarchsec-testing.html
Closing date for applications:
Contact: Marco Guarnieri (marco dot guarnieri at imdea dot org)
More information: http://software.imdea.org/open_positions/2021-04-phd-uarchsec-testing.html
IMDEA Software Institute
Applications are invited for one PhD student position at the IMDEA Software Institute (Madrid, Spain). Selected candidates will work with Marco Guarnieri (https://mguarnieri.github.io) on the design, verification, and implementation of compiler-level countermeasures against microarchitectural and side-channel attacks. The specific topic of the research will be determined based on the common interests of the candidate and the supervisor.
Who should apply?
Ideal candidates have earned (or are in their last year of) a Master's degree in Computer Science, Computer Engineering, or Mathematics, with experience and interest in at least one of the following areas:
- Computer security
- Programming languages and compilers
- Program analysis and verification
- Formal methods
- Logics
Working at IMDEA Software
The IMDEA Software Institute is ranked among the best European research institutes in the areas of Programming Languages and Computer Security. Located in the Montegancedo Science and Technology Park, it perfectly combines the sunny and vibrant city of Madrid with cutting edge research and inspiring working environment. The institute provides an internationally competitive stipend, access to an excellent public health care system, unemployment benefits, retirement benefits, and support for research related travel. The working language at the institute is English. Knowledge of Spanish is not required.
Dates
The duration of the position is intended to be for the duration of the doctoral studies. The ideal starting period is summer/fall 2021. Deadline for applications is April 30th, 2021. Review of applications will begin immediately, and continue until the positions are filled.
How to apply?
See https://software.imdea.org/open_positions/2021-04-phd-uarchsec-compilers.html
Closing date for applications:
Contact: Marco Guarnieri (marco dot guarnieri at Imdea dot org)
05 April 2021
National University of Singapore
Closing date for applications:
Contact: Arash Pashrashid (pashrashid.arash@u.nus.edu)
University of St. Gallen, Switzerland
Research area: Research areas include but are not limited to:
- Verifiable computation
- Secure Multi Party Computation
- Privacy-preserving authentication
- Cryptographic primitives
- A MsC degree in Computer Science, Applied Mathematics or a relevant field;
- Strong mathematical and algorithmic CS background;
- Excellent programming skills;
- Excellent written and verbal communication skills in English
Starting date: By mutual agreement
Apply online: https://jobs.unisg.ch/offene-stellen/phd-position-in-applied-cryptography-and-information-security-m-w-d/09f75f22-649c-48a6-9aa4-659bbd686a84
Closing date for applications:
Contact: Katerina Mitrokotsa
More information: https://jobs.unisg.ch/offene-stellen/phd-position-in-applied-cryptography-and-information-security-m-w-d/09f75f22-649c-48a6-9aa4-659bbd686a84
Friedrich-Alexander-University Erlangen-Nürnberg (FAU)
- privacy-enhancing-technologies
- cryptocurrencies
- password-based cryptography
- proof systems
Work Environment: The Applied Cryptography Lab is part of FAU, which is one of the largest universities in Germany. With its five faculties, FAU offers a scope of subjects ranging from the Humanities to Law and Economics as well as Sciences, Medicine, and Engineering. FAU’s mission statement “Advance through Networks” reflects the close collaboration between the single disciplines. FAU has been ranked the third year in a row the most innovative University in Germany.
Requirements: Candidates for this position should hold a Ph.D. degree in Computer Science or a related discipline (mathematics, ...). The ideal candidate shows strong enthusiasm about research, publishes at leading venues in cryptography or IT security, and has excellent teamworking abilities.
Program details and contact for application/questions: Funding is available for at least 36 months; the salary range is between 32.671 - 78.136 EUR year, depending on your background and experience. Prospective applicants should apply with a cover letter, a research statement, and an academic CV that includes the contact information for two references. Please send a single PDF file and include [PostDoc] in the subject. Applications will be accepted until the position is filled.
Closing date for applications:
Contact: Dominique Schroeder
More information: https://www.chaac.tf.fau.eu