Level 2 · M.Sc
MSc Advanced Cryptography
Cryptography · Live · v0
Doctoral cryptography — security proofs, advanced protocols, and an original verified contribution to the field.
- Path type
- Cryptography
- Requirements
- MSc Cryptography
- Enrollment
-
€19.95
- Deadline
- Next cohort starts 2027-09-06 (AY 2027/28)
- Length
- ~1 year · 42 phases
- Language
- English · Español
- Content freshness
- Curriculum updated 2026-08-22 · content rev 678703ca
- Cortex Credits (CC)
-
126 CC
· 364 CC across all tiers of this programme
What are Cortex Credits? - Syllabus
-
View the phase syllabus
- Foundations & tooling
- What "advanced" means: rigor & the prereq recap
- The toy lab & the running privacy-preserving application
- Security definitions & the game-based method
- Reductions & what a proof of security is
- PRFs, PRPs & the switching lemma
- Hybrid arguments & indistinguishability
- The random-oracle model & its limits
- Lattices, bases & the shortest-vector problem
- Lattice reduction (LLL) intuition
- LWE & Ring-LWE
- SIS & worst-case/average-case hardness
- Pairings on elliptic curves & bilinear maps
- The discrete-log & factoring landscape revisited
- The quantum threat (Shor, Grover)
- Lattice KEMs (Kyber / ML-KEM) from toy parameters
- Lattice signatures (Dilithium / ML-DSA) from toy parameters
- Hash-based signatures (Lamport, Merkle, WOTS, XMSS, SPHINCS+ / SLH-DSA) from toy parameters
- Code-based crypto & the NIST PQC migration story (toy parameters)
- Interactive proofs & zero-knowledge (the graph-isomorphism toy)
- Sigma protocols (Schnorr) & proofs of knowledge (toy group)
- The Fiat–Shamir transform & non-interactive ZK (toy parameters)
- Commitment schemes & polynomial commitments (toy parameters)
- zk-SNARKs: R1CS, QAP, and the trusted setup (toy parameters)
- zk-STARKs & transparent proofs (toy field $\mathbb{F}_{17}$)
- Secret sharing revisited & the MPC model (toy field $\mathbb{F}_{11}$)
- Oblivious transfer (toy group $G = \langle 2\rangle \subset \mathbb{Z}_{23}^*$)
- Yao's garbled circuits (toy circuit $z = (a \wedge b) \vee c$)
- GMW & the secret-sharing approach to MPC (toy circuit $z = (a \wedge b) \vee c$)
- Malicious security & verifiable MPC (toy field $\mathbb{F}_7$)
- Private set intersection (toy group $\mathbb{Z}_{23}^{*}$)
- Partially-homomorphic encryption (Paillier, toy $n = 35$)
- Somewhat-/fully-homomorphic encryption (BGV/CKKS, bootstrapping)
- Threshold signatures & distributed key generation
- Verifiable random functions & verifiable delay functions
- Anonymous credentials, blind signatures & mixnets
- Blockchain & consensus cryptography
- Advanced side-channel & fault attacks on implementations
- Building a verified primitive: vectors, property tests, constant-time review
- Capstone
- Hardening, proof review & "What's Next"
- Portal integration (slug Advanced Cryptography)
- Enrolment prerequisites
-
- A verified account and admissions-committee approval.
- Recommended path: MSc Cryptography (advisory, not blocking).
What changed
Every release of this programme, newest first.
- v0 Pilot Wave A backfill: v0 pilot baseline
Professor: Vacancy available
Sign in to request enrolment