Students are expected to acquire: - ability to define in precise terms what it means for a cryptographic scheme to be “secure” - knowledge of advanced topics in cryptography, such as zero-knowledge proofs of knowledge, and secure multiparty computation.

Having followed the course Cryptography.

- Computational security from cryptographic assumptions (1 CFU). - Provable one-wayness and pseudorandomness (1 CFU). - Secret-Sharing Schemes (1 CFU). - Zero-Knowledge Proofs (1 CFU). - Digital Signatures (1 CFU). - Secure Multi-Party Computation (1 CFU).

The course consists of 40 hours of lessons and 20 hours of exercises. The lessons are dedicated to the presentation of the topics of the course program. The exercises will follow the topics of the lessons; in part, they will be carried out by the teacher, and in part, they will require the active participation of the students.

- Katz and Lindell. Introduction to Modern Cryptography, third edition. - Escudero. An introduction to secret-sharing-based secure multiparty computation. - Evans, Kolesnikov, and Rosulek. A pragmatic introduction to secure multi-party computation.

Lecture slides;

Exam: Written test; Optional oral exam;

The exam aims to assess the knowledge and understanding of the course topics. The exam consists of two parts that take place consecutively on the same day: - Part 1 is a computer quiz consisting of 6 multiple-choice (options A,B,C,D) questions. Each correct answer is 4 points, while each wrong answer amounts to 0 points. This part lasts for 30 minutes. - Part 2 is an open-ended written exam graded from 0 to 9 points. This part lasts for 60 minutes. The final exam grade is obtained by summing the points of Part 1 and Part 2. Students pass the exam only if they achieve a minimum grade of 18. Part 2 is graded only if the student gives at least 3 right answers (12 points) in Part 1. A grade strictly greater than 30 corresponds to the maximum grade of "30 cum laude" ("30 e lode" in Italian). The teacher may request an oral examination (only if the student has achieved the minimum grade of 18) to further assess the student's learning. In such a case, the final exam grade considers both Part 1, Part 2, and the oral examination scores. The student cannot request an oral examination. The use of notes, books, exercise sheets, and electronic devices is forbidden during the exam.

In addition to the message sent by the online system, students with disabilities or Specific Learning Disorders (SLD) are invited to directly inform the professor in charge of the course about the special arrangements for the exam that have been agreed with the Special Needs Unit. The professor has to be informed at least one week before the beginning of the examination session in order to provide students with the most suitable arrangements for each specific type of exam.