papers / talks

The Pseudorandomness of Legendre Symbols under the Quadratic-Residuosity Assumption
Theory of Cryptography Conference, Aarhus, Denmark
27 December 2025
pdf  pptx 
Function Inversion with Preprocessing
ETH Zurich, Zurich, Switzerland
27 October 2025
30 Years of Private Information Retrieval
CISPA, Saarbrücken, Germany
23 October 2025
Simons Institute, Berkeley, CA
7 August 2025
video 
What you can do for PIR and what PIR can do for you
Shonan Workshop on Encrypted Computation, Tokyo, Japan
21 October 2024
The One-Wayness of Jacobi Signatures
MIT CIS Seminar, Cambridge, MA
19 August 2024
CRYPTO Conference, Santa Barbara, CA
19 August 2024
video 
Why we can't have (nice) cryptographic things
Cryptographic Applications Workshop, Zurich, Switzerland
26 May 2024
Private Web Search with Tiptoe
Proton AG, Geneva, Switzerland
18 November 2024
Apple Computer, Virtual
29 February 2024
University of Washington, Seattle, WA
9 November 2023
pdf  pptx 
UT Austin, Austin, TX
14 October 2023
Google, New York, NY
22 September 2023
Cornell Tech, New York, NY
21 September 2023
Google Systems Research Group, Sunnyvale, CA
2 August 2023
Arithmetic Sketching
IACR CRYPTO Conference, Santa Barbara, CA
21 August 2023
video  pdf 
Friendship and Research
StorySLAM, attached to IACR CRYPTO, Santa Barbara, CA
19 August 2023
pdf 
Cryptographic Techniques to Protect Privacy
MIT Schwarzman College of Computing: Expanding Horizons in Computing, Cambridge, MA
29 January 2024
MIT CSAIL Affiliates Annual Meeting, Cambridge, MA
26 May 2023
Survey: Function Inversion with Preprocessing
Simons Institute, Berkeley, CA
3 April 2023
Simple, Fast Single-Server Private Information Retrieval
EPFL Summer Research Institute, Lausanne, Switzerland
6 July 2023
pdf  pptx 
UNC Chapel Hill, Chapel Hill, NC
19 May 2023
ETH Zurich, Zurich, Switzerland
16 January 2023
EPFL, Lausanne, Switzerland
9 January 2023
Carnegie Mellon University, Pittsburgh, PA
9 December 2022
Yale University, New Haven, CT
29 November 2022
Private Analytics: Tools and Applications
Bar-Ilan Winter School on Cryptography, Virtual
24 January 2022
video 
Lightweight Techniques for Private Heavy Hitters
UC Berkeley, Berkeley, CA
15 June 2022
EPFL, Lausanne, Switzerland
7 June 2022
IEEE Security and Privacy, Virtual
25 May 2021
video  pdf  pptx 
MIT Cryptography and Information Security Seminar, Cambridge, MA (virtual)
14 May 2021
SafetyPin: Encrypted Backups with Human-Memorable Secrets
Vienna Cybersecurity and Privacy Research Center, Vienna, Austria (virtual)
10 February 2021
video  pdf 
Privacy-Preserving Aggregate Statistics with Prio
Microsoft Research, Redmond, WA
23 June 2022
PACT All-Hands Meeting, Cambridge, MA
21 September 2020
Private Information Retrieval with Sublinear Online Time
University College London, virtual seminar
29 May 2020
ETH Zurich, Zurich, Switzerland
30 January 2020
Zero-Knowledge Proofs on Secret-Shared Data via Fully Linear PCPs
Simons Institute, Berkeley, CA
27 September 2019
video 
CRYPTO, Santa Barbara, CA
22 August 2019
pdf  pptx 
Privacy-preserving telemetry in Firefox with Prio
Real World Crypto Conference, New York, NY
9 January 2020
Mozilla Security Research Summit, San Francisco, CA
24 May 2019
video 
Protecting Privacy by Splitting Trust
MIT Tau Beta Pi - Da Vinci Lecture, Cambridge, MA
6 April 2022
Stanford (PhD dissertation defense), Stanford, CA
31 May 2019
pdf 
UC San Diego, San Diego, CA
8 April 2019
pdf 
Princeton, Princeton, NJ
4 April 2019
UT Austin, Austin, TX
28 March 2019
Carnegie Mellon University, Pittsburgh, PA
20 March 2019
MIT, Cambridge, MA
14 March 2019
Columbia University, New York, NY
11 March 2019
Brown University, Providence, RI
8 March 2019
UC Santa Cruz, Santa Cruz, CA
6 March 2019
University of Michigan, Ann Arbor, MI
26 February 2019
University of California, Los Angeles, Los Angeles, CA
21 February 2019
University of Wisconsin-Madison, Madison, WI
11 February 2019
Microsoft Research, Redmond, WA
7 February 2019
The Function-Inversion Problem: Barriers and Opportunities
Bay Area Crypto Day, Berkeley, CA
30 November 2018
The Discrete-Logarithm Problem with Preprocessing
EPFL, Lausanne, Switzerland
14 June 2018
MIT Security Seminar, Cambridge, MA
9 May 2018
Eurocrypt, Tel Aviv, Israel
1 May 2018
video  pdf  pptx 
Technion Theory Lunch, Haifa, Israel
24 January 2018
New York Crypto Day, New York, NY
8 December 2017
Stanford Security Lunch, Stanford, CA
29 November 2017
Private, Robust, and Scalable Computation of Aggregate Statistics
Workshop on Encryption, Surveillance, and Transparency, Baltimore, MD
16 August 2018
Commissioner for Data Protection, Schleswig-Holstein, Kiel, Germany
22 June 2018
Brave Browser, San Francisco, CA
9 January 2018
Census Secure Multi-Party Computing and Intel SGX Workshop, U.S. Census Bureau
16 November 2017
DIMACS Workshop on Overcoming Barriers to Data Sharing, New Brunswick, NJ
24 October 2017
EPFL, Lausanne, Switzerland
20 June 2017
Apple Computer, Cupertino, CA
5 May 2017
U.S. Census Bureau, Suitland, MD
28 April 2017
Facebook, Menlo Park, CA
25 April 2017
NSDI, Boston, MA
28 March 2017
pdf  keynote 
MIT Security Seminar, Cambridge, MA
22 March 2017
Stanford Security Lunch, Stanford, CA
8 March 2017
Google, Mountain View, CA
28 February 2017
Google, New York, NY
9 January 2017
DIMACS/CEF Workshop on Cryptography and Software Obfuscation, Stanford, CA
9 November 2016
Stanford Cryptography Policy Project, Stanford, CA
2 November 2016
How Cryptography Fails in Practice
Hughes Network Systems, Germantown, Maryland
28 July 2017
pdf  keynote 
Quantum Operating Systems
HotOS, Whistler, Canada
11 May 2017
Grover Search and its Cryptographic Applications
Qualifying Exam Talk, Stanford, CA
21 November 2016
pdf 
Cryptographic Techniques to Ensure Fair Randomness in Legal Processes
Stanford Law School (CodeX Speaker Series), Stanford, CA
5 October 2016
video  pdf  keynote 
Password Hashing, Space-Hardness, and the Balloon Functions
Asiacrypt, Hanoi, Vietnam
5 December 2016
pdf  keynote 
Google, Mountain View, CA
22 June 2016
Bay Area Crypto Day, Stanford, CA
2 May 2016
I-CORE Day, Weizmann Institute of Science, Israel
20 April 2016
Bar Ilan University, Ramat Gan, Israel
18 April 2016
Stanford Computer Forum, Affiliates Meeting, Stanford, CA
11 April 2016
UC Berkeley Security Seminar, Berkeley, CA
11 March 2016
Apple Computer, Cupertino, CA
11 February 2016
Stanford Security Lunch, Stanford, CA
2 December 2015
Deterring Cheating in Online Environments
ACM CHI 2016, San Jose, CA
9 May 2016
pdf  keynote 
Recommendations for Randomness in the Operating System
HotOS XV, Karthaus Ittingen, Switzerland
20 May 2015
pdf  pptx 
Stanford Security Lunch, Stanford, CA
13 May 2015
Riposte: An Anonymous Messaging System Handling Millions of Users
CMU Silicon Valley, Mountain View, CA
24 April 2017
UC Davis, Davis, CA
25 February 2016
IEEE Security and Privacy (Oakland), San Jose, CA
18 May 2015
pdf  pptx 
Stanford Computer Forum, Affiliates Meeting, Stanford, CA
27 April 2015
Charles River Crypto Day (hosted by Microsoft Research), Cambridge, MA
20 February 2015
video  pdf  pptx 
Stanford Security Lunch, Stanford, CA
4 February 2015
Cryptography in the Open: Public-Key Crypto and the NSA
Ethereum Meetup Silicon Valley, Palo Alto, CA
29 March 2015
video  pdf  pptx 
Bivariate Polynomials Modulo Composites and their Applications
ASIACRYPT, Kaohsiung, Taiwan
8 December 2014
pdf 
Stanford Computer Forum, Affiliates Meeting, Stanford, CA
14 April 2014
FlashPatch: Spreading Software Updates over Flash Drives in Under-connected Regions
ACM DEV, San Jose, CA
5 December 2014
pdf  pptx 
Ensuring High-Quality Randomness in Cryptographic Key Generation
Stanford Security Lunch, Stanford, CA
19 February 2014
pdf  pptx 
ACM CCS, Berlin, Germany
6 November 2013
Conscript Your Friends into Larger Anonymity Sets with JavaScript
WPES Workshop, Berlin, Germany
4 November 2013
pdf  pptx 
Proactively Accountable Anonymous Messaging in Verdict
USENIX Security Symposium, Washington, DC
14 August 2013
video  pdf  pptx 
Ethics of Anonymity: Welcome to the World of Human Rights: Please Make Yourself Uncomfortable
CREDS Workshop, San Francisco, CA
23 May 2013
Scavenging for Anonymity with BlogDrop
Provable Privacy Workshop, Vigo, Spain
9 July 2012
pdf 
Potholes and Progress: Deploying ChildCount+ in Isingiro District
Maternal Health Workshop, Kampala, Uganda
9 November 2010
Dissent: Accountable Group Anonymity
ACM CCS, Chicago, IL
6 October 2010
pdf  pptx