## SyllabusThe following is a
## Jan 16: Elliptic Curve Groups**Topics**Elliptic curves The chord-and-tangent method Bilinear maps and pairing groups
**References**
## Jan 18: Pairing Groups**Topics**Bilinear maps and pairing groups Tripartite Diffie-Hellman The MOV discrete log algorithm
**References**
## Jan 23: Short Signatures from Pairings**Topics**(**Lecture Notes**)Boneh-Lynn-Shacham (BLS) signatures The random oracle model
**References**
## Jan 25: Aggregate Signatures**Topics**(**Lecture Notes**)Aggregating BLS signatures Multi-signatures
**References**
## Jan 30: Threshold Signatures**Topics**(**Lecture Notes**)Shamir secret sharing Threshold BLS signatures
**References**
## Feb 1: Identity-Based Encryption (IBE)**Topics**(**Lecture Notes**)Identity-based encryption (IBE) Boneh-Franklin construction
**References**
## Feb 6: Broadcast Encryption**Topics**(**Lecture Notes**)Broadcast encryption Boneh-Gentry-Waters construction
**References**
## Feb 8: Distributed Broadcast Encryption**Topics**(**Lecture Notes**)Broadcast encryption Boneh-Gentry-Waters construction Kolonelos-Malavolta-Wee construction
**References**
## Feb 13: Attribute-Based Encryption (ABE)**Topics**(**Lecture Notes**)Attribute-based encryption Linear secret sharing Goyal-Pandey-Sahai-Waters construction
**References**
## Feb 15: Attribute-Based Encryption (ABE)**Topics**(**Lecture Notes**)Attribute-based encryption Linear secret sharing and monotone span programs Goyal-Pandey-Sahai-Waters construction Selective security of the GPSW scheme
**References**
## Feb 20: Somewhat Homomorphic Encryption**Topics**(**Lecture Notes**)Somewhat homomorphic encryption Composite-order pairing groups and the subgroup decision assumption Boneh-Goh-Nissim construction
**References**
## Feb 22: Non-Interactive Zero-Knowledge (NIZK)**Topics**Non-interactive zero-knowledge (NIZK) for NP Groth-Ostrovsky-Sahai construction
**References**
## Feb 27: Batch Arguments (BARG)**Topics**Batch arguments for NP Waters-Wu construction
**References**
## Feb 29: Functional Commitments and Homomorphic Signatures## Mar 5: Polynomial Commitments## Mar 7: Succinct Non-Interactive Arguments (SNARG)## Mar 12: Spring Break (No Class)## Mar 14: Spring Break (No Class)## Mar 19: Introduction to Lattices## Mar 21: Short Integer Solutions## Mar 26: Cryptographic Constructions from SIS## Mar 28: Lattice Trapdoors and Preimage Sampling## Apr 2: Learning with Errors (LWE)## Apr 4: Fully Homomorphic Encryption (FHE)## Apr 9: ABE for Circuits## Apr 11: Additional Topics## Apr 16: Additional Topics## Apr 18: Additional Topics## Apr 23: Additional Topics## Apr 25: Additional Topics |