Dragoș Rotaru (@DragosRotaru) profile picture

Research engineer at @circle. Most of the time I tweet about cryptography, sometimes about others.

Joined April 2011
Photo by Dragoș Rotaru (@DragosRotaru)Photo by Dragoș Rotaru (@DragosRotaru)Photo by Dragoș Rotaru (@DragosRotaru)Photo by Dragoș Rotaru (@DragosRotaru)Photo by Dragoș Rotaru (@DragosRotaru)Photo by Dragoș Rotaru (@DragosRotaru)Photo by Dragoș Rotaru (@DragosRotaru)Photo by Dragoș Rotaru (@DragosRotaru)Photo by Dragoș Rotaru (@DragosRotaru)Photo by Dragoș Rotaru (@DragosRotaru)
Dragoș Rotaru retweeted
Here’s a short explainer video on our MPC solution and the problems it solves
24
37
19
256
27,781
Dragoș Rotaru retweeted
how a private stablecoin transfer should feel: open your wallet. toggle private on and hit send. no one else can see it. how it actually works on @arc : configurable privacy at the protocol layer, encrypted state in hardware enclaves, master key threshold-split across validators, post-quantum from day one. what each piece actually does ↓
74
34
15
239
45,524
Dragoș Rotaru retweeted
4397328654844826923795068102505872571721883526553349659561256924505973939597593482272505698004801207988043088656411102133523080581 divides RSA-260
653
4,342
1,378
36,899
19,016,813
Dragoș Rotaru retweeted
Proud to announce ProveKit v1! Devs can build authentication with ZK privacy, running on all user devices. 2 years ago I started this project to show that every users’ phone is capable of ZK proving a passport document, under a minute, no trusted setup, 128bit post quantum secure. Thanks to collaborations with many world class teams, and several breakthroughs, this is now reality! Thank you everyone involved 🙏 ProveKit uses Noir as it's programming language, so try your circuits today! world.org/blog/engineering/p…
20
56
20
329
133,758
Dragoș Rotaru retweeted
As y'all know, I've been shilling the gospel of MPC for several years now and everyone loves Stoffel. But how should you actually go about deciding if you need MPC? How do you actually choose your MPC framework? Short thread 🧵
1
5
12
703
🎙️This week, @AnnaRRose chats with @sergey_nog from @circle about @arc and its TEE-based Privacy Sector. They discuss why they chose TEEs, the tradeoffs between hardware trust and composability, his recent debate w @secparam and more! zeroknowledge.fm/podcast/405…
1
3
1
14
2,886
Dragoș Rotaru retweeted
The Joy of Cryptography is now available for free online, in its entirety. joyofcryptography.com/ Thanks to @mitpress for supporting open access.
2
107
3
380
22,755
Dragoș Rotaru retweeted
RSA private keys biased toward 0 bits can be factored by swapping a hard math problem for an easy one: integer factorization becomes polynomial factorization. We found hundreds of real-world keys vulnerable to this. Many traced to a type mismatch in CompleteFTP (now patched): each 32-bit limb got only 8 bits of randomness. We recovered 603 RSA and 74 DSA private keys. blog.trailofbits.com/2026/06…
9
162
7
796
52,258
Dragoș Rotaru retweeted
Since we started the project, I’ve been telling the @circle team that this will be the last privacy solution in blockchain space. And we delivered. What we have built is not just privacy-preserving smart contracts. Instead, it's a paradigm shift in how blockchains, composability, and privacy need to co-exist. The design addresses the two core failures of prior privacy systems: lack of composability and a painful developer journey. Pure cryptographic privacy is elegant, but expensive and hard to scale in practice. Instead, this design builds on the now-established trend of cryptographic enclave technologies. What we’ve built is a parallel execution environment on @arc : Arc public blockchain continues processing cleartext blocks, while the Arc privacy sector operates as a parallel privacy-preserving virtual machine that processes encrypted transactions. State, transactions, and user accounts remain hidden. Validators cannot inspect what’s inside, even if they try to snoop or are compromised. Yet they continue producing blocks for both public and private states in sync, committing to each state tree. That is also a major difference from designs that rely on access control, which inevitably creates failure points and data exposure risk. The public and private state composition is the game changer for developing. For the first time, users can move between private and public state within the same block space. No bridge. No extra wallet layer. No separate accounts. A single transaction can move between private and public execution with zero friction. Furthermore, the environment gives users post-quantum protection by design. Transactions and accounts remain encrypted, and public keys stay protected under post-quantum secure algorithms. Any account or asset created inside the privacy sector is automatically post-quantum secure. The result: a fully composable privacy sector on @arc that is post-quantum secure and seamlessly interoperable with public execution. This is the last privacy layer in Web3. See the whitepaper: 6778953.fs1.hubspotuserconte… @circle @arc
3
19
17
121
56,045
Dragoș Rotaru retweeted
Post-quantum migration is a nightmare. That's why @circle is building @arc with post-quantum protections from day one. TLDR: * Native post-quantum signature verification: Arc ships with an SLH-DSA-SHA2-128s precompile, enabling smart accounts to verify quantum-safe signatures on-chain today. * Post-quantum account abstraction: Developers can build ERC-4337 wallets that use post-quantum signatures immediately, without waiting for protocol-level transaction signature changes. * Quantum-safe privacy by default: Arc’s privacy layer encrypts transactions, state, and execution using hybrid post-quantum cryptography (X-Wing, ML-KEM, PQ TLS), protecting against harvest-now-decrypt-later attacks. * Post-quantum encrypted messaging: Transaction memos support HPKE + X-Wing encryption, giving developers a standardized way to exchange quantum-safe encrypted data on-chain. * Migration tools for existing assets: Arc introduces mechanisms such as PQ public-key registries, hash-and-rotate wallets, smart-account upgrades, and a proposed post-quantum replacement for ecrecover to help existing contracts and users migrate safely. Read more: 6778953.fs1.hubspotuserconte…
Quantum computing introduces long-term risk for digital infrastructure, from wallet signatures to validator integrity and more. Circle’s post-quantum whitepaper explores Arc’s phased approach to resilience across: → USDC → Smart contracts → Validators → Infrastructure systems Planning for long-term security and institutional adoption. arc.io/post-quantum-whitepap…
12
17
4
80
16,160
Dragoș Rotaru retweeted
On May 15, THORChain was drained for ~$10.7M. Root cause: a flawed implementation of GG20, an MPC-based threshold signature scheme. Theoretically sound MPC schemes keep failing in implementation. So we built a reference for it 👇
4
12
61
5,418
Dragoș Rotaru retweeted
Google’s 2029 PQ readiness timeline is a wake up call. Arc is taking a holistic approach to deploying PQ cryptography including PQ wallet signatures on mainnet launch. PQR is not zero-sum. The ecosystem needs to move together and we’re excited to help lead the way.
4
14
8
68
26,128
Dragoș Rotaru retweeted
For the last 30 years we were always 5 years away from Quantum Computers. But sentiment suddenly flipped. Technology is suddenly improving. In just the last couple of weeks, Google suggested Q-day could come as early as ~2029, and new research points to breaking ECC requiring far fewer qubits than previously thought. We still don’t know when quantum will come to reality. But to me, one thing is more clear than ever - when it comes, it will be sudden. For blockchains, dealing with quantum is both a blessing and a curse. Yes many, besides Bitcoin, support “upgrade” mechanisms. But migrating liquidity, wallets, and applications is a nightmare. @arc is built with quantum threat in mind from day one. A practical roadmap allows to both support existing ecosystem of tools and apps built around ECC cryptography, but also have quantum-safe built-in mechanisms (like signatures and checkpoints) to keep assets bullet proof. One of the most unique and interesting aspects of the architecture is that because @arc will leverage confidential compute subspace. Within that subspace, all assets, applications, and transactions will be private and PQ secure by default. So, for instance, you can still generate a traditional ECC key within the subspace, but because of the extra layer of PQ encryption build on top, the keys and interactions fully hidden from adversaries. Stay tuned for more. @jerallaire of @circle explains on @tbpn ⬇️
Google’s 2029 PQ readiness timeline is a wake up call. Arc is taking a holistic approach to deploying PQ cryptography including PQ wallet signatures on mainnet launch. PQR is not zero-sum. The ecosystem needs to move together and we’re excited to help lead the way.
8
13
2
57
14,538
We now live in a world where an anagram (MCP) has become more popular than MPC.
2
7
286
Dragoș Rotaru retweeted
The first two known exploits against live ZK circuits just happened, and they weren't subtle underconstrained bugs. They were Groth16 verifiers deployed without completing the trusted setup ceremony. One was white-hat rescued for ~$1.5M, the other drained for 5 ETH. 🧵
17
83
20
373
53,098
Dragoș Rotaru retweeted
We just announced zkao, been working on it for the last few months full time, it's our response to "auditors might go extinct in a few years". After all, if we do go extinct, might as well be part of the problem. Let's be reassuring though, the tool is not here yet. As we wrote in the past, we test it after every audit, and it constantly doesn't find (important) bugs we find in audits, and sometimes find really good bugs BUT thinks they're not impactful. Every time we try to fix that to improve the tool :) It's been getting better and better so quickly! It also finds a lot of false positives, and this is where we think we can bring a lot of value: we're not just another per-PR/commit review bot, we are trying to only surface important bugs that we can confirm. This is an uphill battle from our side BUT we firmly believe this is how we provide true value to developers (instead of having them click through warnings). Anyway, the tool is going to get better every week, because we will improve it, or because the models will get better. It's truly amazing to work on a product that improves for free due to research from the big LLMs :D We're focusing on Circom for now, and we're onboarding early-access users. If you're interested in trying the tool, let me know!
AI vulnerability research is non-deterministic. The same model looking at the same code won't take the same reasoning path every time. Some paths find nothing. Some paths find the bug. A single scan is a coin flip. But what if you keep flipping? Introducing zkao.
1
3
2
30
5,779
Can you draw some concepts (eg art, logos, movie posters, etc) accurately, yet cannot describe them in words? That's uncommon for humans. But we find this is the case for vision-language models. They memorize and reproduce some images near-perfectly, yet fail to describe them
🧠🖌️💭 ChatGPT can accurately reproduce a Harry Potter movie poster. But can it describe the same poster in words from memory? Spoiler: it cannot! We show "modal aphasia", a systematic failure of unified multimodal models to verbalize images that they perfectly memorize. A 🧵
1
6
21
3,711