BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: A dead man’s full-yet-responsible-disclosure syste
 m\n   When: Friday\, Aug 12\, 16:30 - 17:15 PDT\n   Where: Caesars Forum -
  Alliance 301-309\, 321 (Track 4) - [1]Map\n\n   SpeakerBio:Yolan Romaille
 r \, Applied Cryptographer\n   Yolan is an applied cryptographer delving i
 nto (and mostly dwelling\n   on) cryptography\, secure coding\, and other 
 fun things. He has\n   previously spoken at Black Hat USA\, BSidesLV\, Cry
 ptovillage\, NorthSec\,\n   GopherConEU and DEF CON on topics including au
 tomation in\n   cryptography\, public keys vulnerabilities\, elliptic curv
 es\,\n   post-quantum cryptography\, functional encryption\, open source\n
    security\, and more! He notably introduced the first practical fault\n 
   attack against the EdDSA signature scheme\, and orchestrated the\n   ful
 l-disclosure with code of the CurveBall vulnerability.\n\n   Description:\
 n   Do you ever worry about responsible disclosure because they could\n   
 instead exploit the time-to-patch to find you and remove you from the\n   
 equation? Dead man switches exist for a reason...\n\n   In this talk we pr
 esent a new form of vulnerability disclosure relying\n   on timelock encry
 ption of content: where you encrypt a message that\n   cannot be decrypted
  until a given (future) time. This notion of\n   timelock encryption first
  surfaced on the Cypherpunks mailing list in\n   1993 by the crypto-anarch
 ist founder\, Tim May\, and to date while there\n   have been numerous att
 empts to tackle it\, none have been deployed at\n   scale\, nor made avail
 able to be used in any useful way. This changes\n   today: we’re releasi
 ng a free\, open-source tool that achieves this\n   goal with proper secur
 ity guarantees. We rely on threshold\n   cryptography and decentralization
  of trust to exploit the existing\n   League of Entropy (that is running a
  distributed\, public\, verifiable\n   randomness beacon network) in order
  to do so. We will first cover what\n   all of these means\, we will then 
 see how these building blocks allow\n   us to deploy a responsible disclos
 ure system that guarantees that your\n   report will be fully disclosed af
 ter the time-to-patch has elapsed.\n   This system works without any furth
 er input from you\, unlike the usual\n   Twitter SHA256 commitments to a f
 ile on your computer.\n\n   '\n\n   1. https://defcon.outel.org/consolidat
 ed_page.html#CaesarsAllianceBR\n\n\n
DTEND:20220813T001500Z
DTSTART:20220812T233000Z
LOCATION:DC - Caesars Forum - Alliance 301-309\, 321 (Track 4)
SUMMARY:A dead man’s full-yet-responsible-disclosure system
END:VEVENT
END:VCALENDAR