TALKS

PhD Defense

• 11/2021: Theoretical Hardness of Algebraically Structured Learning With Errors [Slides] [Video] IRISA, Rennes, France

Threshold Encryption from LWE

• 05/2026: IND-CCA Lattice Threshold KEM under 30 KiB [Slides] [Video] PKC 2026, presented online
• 04/2026: Amber - a New Family of Lattice-Based Threshold Encryption Schemes, Crypto Seminar, Aarhus, Denmark
• 05/2024: Threshold Fully Homomorphic Encryption from LWE – Challenges and Perspectives [Slides] FHE:IDEAs, affiliated with Eurocrypt'24, Zürich, Switzerland
• 07/2023: Simple Threshold (Fully Homomorphic) Encryption From LWE with Polynomial Modulus [Slides] NordiCrypt Summer 2023, Aarhus, Denmark
• 01/2023: Simple Threshold (Fully Homomorphic) Encryption From LWE with Polynomial Modulus Seminar of the NTNU Applied Cryptography Lab, Trondheim, Norway
• 11/2022: Simple Threshold (Fully Homomorphic) Encryption From LWE with Polynomial Modulus Aarhus Crypto Seminar, Aarhus, Denmark

Module Learning With Errors

• 05/2026: Hardness of M-LWE with General Distributions and Applications to Leaky Variants [Slides] [Video] PKC 2026, presented online
• 01/2026: Module Learning with Errors with Truncated Matrices [Slides] Joint Online Cryptography Seminars, Online
• 07/2023: Module Learning With Errors With Short Distributions Seminar, Imperial College, London, UK
• 10/2021: Hardness of Module Learning With Errors With Small Secrets [Slides] Aarhus Crypto Seminar, Aarhus, Denmark
• 10/2021: Hardness of Module Learning With Errors With Small Secrets [Slides] Séminaire C2, Inria Paris, France
• 12/2020: Towards Classical Hardness of Module-LWE: The Linear Rank Case [Slides] and [Video] Asiacrypt 2020, Online
• 11/2020: Towards Classical Hardness of Module-LWE: The Linear Rank Case [Slides] Team Seminar, Online
• 11/2020: Towards Classical Hardness of Module-LWE: The Linear Rank Case [Slides] Journées C2, Online

Lattice-Based Cryptography

• 01/2026: Post-Quantum Cryptography from Lattices [Slides] Ecole Polytechnique Thiès, Senegal
• 05/2025: Lattice-Based Cryptography - A Gentle Introduction [Slides Part 1] [Slides Part 2] Flashbots, Online
• 07/2024: Lattice-Based Cryptography - A Gentle Introduction [Slides] Journée ICO, Montpellier, France
• 07/2024: Lattice-Based Cryptography - A Gentle Introduction [Slides] CIEL du LIRMM, Montpellier, France
• 10/2023: Lattice-Based Cryptography [Slides] ASCrypto School, Quito, Ecuador
• 09/2020: Cryptographie à base de réseaux [Slides] Visite des nouve.lles.aux arrivant.e.s ENS, Rennes, France
• 09/2019: Cryptographie à base de réseaux [Slides] Visite des nouve.lles.aux arrivant.e.s ENS, Rennes, France

Leftover Hash Lemma(s) over Cyclotomic Rings

• 03/2025: Leftover Hash Lemma(s) over Cyclotomic Rings - How to find the right one for your cryptosystem! Aarhus Crypto Seminar, Aarhus, Denmark

Compressing OR-Proofs

• 01/2025: The Power of NAPs: Compressing OR-Proofs via Collision-Resistant Hashing [Slides] Séminaire C2, Nancy, France
• 01/2025: The Power of NAPs: Compressing OR-Proofs via Collision-Resistant Hashing [Slides] ECO Seminar, Montpellier, France

Lattice-Based Aggregate Signatures

• 06/2024: Aggregating Lattice-Based Signatures - Challenges and New Results [Slides] [Video] newtpqc, affiliated with PQCrypto'24, Oxford, UK
• 08/2022: Overfull: Too Large Aggregate Signatures Based on Lattices [Slides] [Video] CFAIL 2022, Santa Barbara, US
• 07/2022: (Sequential) Aggregate Signatures Based on Lattices Crypto Summer Day, Aarhus, Denmark
• 06/2022: (Sequential) Aggregate Signatures Based on Lattices Journées Nationales 2022 du GdR Sécurité Informatique, Paris, France
• 03/2021: Towards Aggregating Lattice Signatures: Linear Aggregation With Compression [Slides] Aarhus Crypto Seminar, Online

Partial Vandermonde Problems

• 07/2023: Some Easy Instances of Ideal-SVP and Implications to the Partial Vandermonde Knapsack Problem Lattice Meeting, Royal Holloway, London, UK
• 10/2022: Some Easy Instances of Ideal-SVP and Implications to the Partial Vandermonde Knapsack Problem Caramba Seminar, Nancy, France
• 10/2022: Some Easy Instances of Ideal-SVP and Implications to the Partial Vandermonde Knapsack Problem ENSL/CWI/RHUL Joint Online Cryptography Seminar, Lyon, France
• 10/2022: Some Easy Instances of Ideal-SVP and Implications to the Partial Vandermonde Knapsack Problem ECO Seminar, Montpellier, France
• 08/2022: Some Easy Instances of Ideal-SVP and Implications to the Partial Vandermonde Knapsack Problem [Slides] [Teaser Video] [Full Video] Crypto 2022, Santa Barbara, US
• 04/2022: Partial Vandermonde Problems and PASS Encrypt Journées C2, Hendaye, France
• 11/2021: Partial Vandermonde Problems and PASS Encrypt [Slides] Lfant Seminar, Bordeaux, France

Middle-Product Learning with Rounding

• 04/2020: Middle-Product Learning with Rounding Problem and its Applications Seminaire Cryptographie IRMAR, Online
• 01/2020: Middle-Product Learning with Rounding Problem and its Applications [Slides] Team Seminar, Rennes, France
• 12/2019: Middle-Product Learning with Rounding Problem and its Applications [Slides] Asiacrypt 2019, Kobe, Japan
• 12/2019: Middle-Product Learning with Rounding Problem and its Applications [Slides] Cybersecurity Lab Seminar, Monash University, Melbourne, Australia

Cryptography and National Identity Cards

• 10/2025: Cryptography: from the Mind to the Chip [Slides] Joint scientific talk with Loïc Masure for HCERES evaluation, LIRMM, Montpellier
• 10/2018: Mit eID im Netz - Wie viel Kryptographie steckt in meinem elektronischen Personalausweis? [Link] Workshop at the Open Codes exhibition, Karlsruhe, Germany

Misc

• 07/2022: How to make crypto events safe and more inclusive? [Slides] Lightning Talk at the Foundations and Applications of Lattice-based Cryptography Workshop, Edinburgh, UK
• 12/2021: Feminist Reading Circle for Computer Scientists [Slides] Presentation and animation with S. Moreau at the women-only meeting of IRISA/Inria RBA, Rennes, France
• 09/2021: Feminist Reading Circle for Computer Scientists [Slides] Lightning Talk at the Women in Security and Cryptography Workshop