NTNU Applied Cryptology Lab (NaCl)

Welcome to the unofficial page of the NTNU Applied Cryptology Lab (NaCl), a cryptography group at NTNU with members at the Department of Information Security and Communication Technology and the Department of Mathematical Sciences, in Trondheim and Gjøvik. The official group page only lists current members, so this page aims to list everyone who is or has been part of the group. If you find an omission or a mistake, please send me an email.

Last updated: September 2026.

The NTNU Applied Cryptology Lab in 2026
2026
The NTNU Applied Cryptology Lab in 2024
2024
The NTNU Applied Cryptology Lab in 2023
2023
The NTNU Applied Cryptology Lab in 2020
2020

Faculty

NameFromTo
Jeongeun Park2024 
Tjerand Silde2022 
Staal A. Vinterbo2017 
Danilo Gligoroski2008 
Kristian Gjøsteen2008 
Slobodan Petrovic2004 
Stig Frode Mjølsnes1999 
Bor de Kock20222024
Anamaria Costache20202025
Jiaxin Pan20192025
Colin Boyd20132025
Jan Arild Audestad19932012
Svein J. Knapskog19872009

Years include positions at the Norwegian Institute of Technology (NTH), which became part of NTNU in 1996, and at Gjøvik University College, which merged with NTNU in 2016. The Department of Information Security and Communication Technology was previously known as the Department of Telematics.

Postdocs and researchers

NameFromTo
Kamil Doruk Gur2026 
Mattia Veroni2023 
Hans Heum20232026
Dan Zhang20222026
Yao Jiang Galteland20212023
Chen Qian20192022
Thomas Haines20192021
Christopher Carr20182020
Clémentine Gritti20182020
Gareth T. Davies20162018
Ruxandra F. Olimid20162022
Markku-Juhani O. Saarinen20142015
Joe-Kai Tsay20112013
Danilo Gligoroski20052008
Kristian Gjøsteen20042008

PhD candidates

This list includes PhD candidates and graduates from the Department of Information Security and Communication Technology (formerly the Department of Telematics) and the Department of Mathematical Sciences whose theses have cryptography as a major part, with their main supervisor. For graduates, the year is the year of the thesis defence, and for current PhD candidates, the start year is given in parentheses.

NameYearThesisSupervisor
Einar Karlsen Thesen(2026) Kristian Gjøsteen
Pedro Pablo Cardona Arroyave(2026) Jeongeun Park
Reem Salman(2026) Staal A. Vinterbo
Espen Sund(2025) Staal A. Vinterbo
Charlotte Ida Pauline Mylog(2023) Kristian Gjøsteen
Caroline Sandsbråten(2022) Tjerand Silde
Emil August Hovd Olaisen(2022) Tjerand Silde
Ole Martin Edstrøm(2022) Kristian Gjøsteen
Oskar Goldhahn(2021) Kristian Gjøsteen
Sahana Sridhar(2021) Danilo Gligoroski
Sonu Kumar Jha(2019) Danilo Gligoroski
Amir Zarei2025Differential Privacy in Secure Multiparty Computation and Deep Neural NetworksStaal A. Vinterbo
Enio Marku2025SafeLib: Secure and High-Performance Outsourcing of Network Functions Made EasyColin Boyd
Lea Nürnberger2025Analysis and Optimisation of Fully Homomorphic EncryptionAnamaria Costache
Lise Millerjord2025Key Exchange in a Post Quantum WorldColin Boyd
Jonathan Komada Eriksen2024Supersingular Endomorphism Rings: Algorithms and ApplicationsColin Boyd
Pia Bauspieß2024Post-Quantum Secure Biometric SystemsAnamaria Costache
Runzhi Zeng2024Tightly-secure Key Encapsulation Mechanism and its ApplicationJiaxin Pan
Elsie Mestl Fondevik2024Key Exchange in Special CircumstancesKristian Gjøsteen
Bor de Kock2023From Lattice Crypto to Lættis Krypto: Various Approaches to Post-Quantum Key ExchangeColin Boyd
Magnus Ringerud2023Tight Security for Authenticated Key Exchange Protocols and Signature SchemesJiaxin Pan
Mattia Veroni2023A Study on Tighter and More Efficient Isogeny-Based Cryptographic ProtocolsDanilo Gligoroski
Morten Rotvold Solberg2023Security for Electronic Voting SystemsKristian Gjøsteen
Mayank Raikwar2022Cryptography for Innovative Blockchain ServicesDanilo Gligoroski
Shuang Wu2022Cryptography for BlockchainsKristian Gjøsteen
Tjerand Silde2022Privacy-Preserving Cryptography from Zero-Knowledge ProofsKristian Gjøsteen
Yao Jiang2021Cryptographic Tools for Cloud SecurityKristian Gjøsteen
Herman Galteland2020Malicious CryptographyKristian Gjøsteen
Christopher Carr2019Towards Fairness and Decentralisation in Modern CryptocurrenciesColin Boyd
Martin Strand2018Fully Homomorphic Encryption with Applications to Electronic VotingKristian Gjøsteen
Britta Hale2017Low-Latency Key Exchange and Secure ChannelsColin Boyd
Håkon Jacobsen2017A Modular Security Analysis of EAP and IEEE 802.11Danilo Gligoroski
Simona Samardjiska2015Multivariate Public Key Cryptosystems Produced by QuasigroupsDanilo Gligoroski
Anton Stolbunov2012Cryptographic Schemes Based on IsogeniesStig Frode Mjølsnes
Asgeir Bertelsen Steine2012Privacy-Preserving Cryptographic ProtocolsKristian Gjøsteen
Benedikt Westermann2012Challenges of Anonymous Communication: Bridging Gaps between Theory and PracticeSvein J. Knapskog
Martin Eian2012Robustness in Wireless Network Access ProtocolsStig Frode Mjølsnes
Mohamed El-Hadedy Aly2012Implementing Algorithms on FPGA PlatformsSvein J. Knapskog
Rune Steinsmo Ødegård2012Hash Functions and Gröbner Bases CryptanalysisSvein J. Knapskog
Tord Ingolf Reistad2012A General Framework for Multiparty ComputationsStig Frode Mjølsnes
Øystein Øvreås Thuen2011Bilinear Pairings in CryptographyKristian Gjøsteen
Marie Elisabeth Gaup Moe2009Security, Privacy and Trust in Dynamic NetworksSvein J. Knapskog
Kristian Gjøsteen2004Subgroup Membership Problems and Public Key CryptosystemsIdar Hansen
Tønnes Brekne2001Encrypted ComputationSvein J. Knapskog
Kenneth Roar Iversen1991Applications of Cryptographic “Zero-Knowledge” Techniques in Computerized Secret Ballot Election SchemesSvein J. Knapskog
Stig Frode Mjølsnes1990Some Issues in Cryptographic ProtocolsSvein J. Knapskog

Selected publications

Papers at IACR Crypto, Eurocrypt, and Asiacrypt, the IACR Journal of Cryptology (JoC), ACM CCS, IEEE S&P, and USENIX Security with at least one author who was a member of the group at the time of publication. Group members are in bold. Papers that appeared both at a conference and in the Journal of Cryptology are listed once, by their conference version. AUSCRYPT was held in Australia in 1990 and 1992, alternating with ASIACRYPT in Japan, and the two merged into the annual ASIACRYPT conference from 1994.

YearVenuePaperAuthors
2026ASIACRYPTFormalizing and Strengthening the Security Proof of NTORDupressoir, Gjøsteen, Low, and Mylog
2026ACM CCSOlingo: Threshold Lattice Signatures with DKG and Identifiable AbortGur, Hough, Katz, Sandsbråten, and Silde
2026ACM CCSsPAR: (Somewhat) Practical Anonymous RouterDas, Park, and Sung
2026CRYPTOMulti-key FHE with Non-Interactive Setup in the Plain ModelMin, Park, and Song
2025CRYPTOVerifiable Computation for Approximate Homomorphic Encryption SchemesCascudo, Costache, Cozzo, Fiore, Guimarães, and Soria-Vazquez
2025CRYPTOXHMQV: Better Efficiency and Stronger Security for Signal’s Initial Handshake based on HMQVFiedler, Günther, Pan, and Zeng
2024ASIACRYPTHELIOPOLIS: Verifiable Computation over Homomorphically Encrypted Data from Interactive Oracle Proofs is PracticalAranha, Costache, Guimarães, and Soria-Vazquez
2024EUROCRYPTKey Exchange with Tight (Full) Forward Secrecy via Key ConfirmationPan, Riepel, and Zeng
2024EUROCRYPTToothpicks: More Efficient Fork-Free Two-Round Multi-SignaturesPan and Wagner
2024EUROCRYPTAprèsSQI: Extra Fast Verification for SQIsign Using Extension-Field SigningCorte-Real Santos, Eriksen, Meyer, and Reijnders
2024USENIX SecuritySWOOSH: Efficient Lattice-Based Non-Interactive Key ExchangeGajland, de Kock, Quaresma, Malavolta, and Schwabe
2023ACM CCSVerifiable Mix-Nets and Distributed Decryption for Voting from Lattice-Based AssumptionsAranha, Baum, Gjøsteen, and Silde
2023ASIACRYPTA Generic Construction of Tightly Secure Password-Based Authenticated Key ExchangePan and Zeng
2023ASIACRYPTTighter Security for Generic Authenticated Key Exchange in the QROMPan, Wagner, and Zeng
2023ASIACRYPTA Simple and Efficient Framework of Proof Systems for NPWang, Su, Pan, and Chen
2023ASIACRYPTCryptographic Smooth NeighborsBruno, Corte-Real Santos, Costello, Eriksen, Meyer, Naehrig, and Sterner
2023CRYPTOLattice-Based Authenticated Key Exchange with Tight SecurityPan, Wagner, and Zeng
2023CRYPTOOn Optimal Tightness for Key Exchange with Full Forward Secrecy via Key ConfirmationGellert, Gjøsteen, Jacobsen, and Jager
2023EUROCRYPTChopsticks: Fork-Free Two-Round Multi-Signatures from Non-Interactive AssumptionsPan and Wagner
2023JoCCompact Structure-Preserving Signatures with Almost Tight SecurityAbe, Hofheinz, Nishimaki, Ohkubo, and Pan
2022ASIACRYPTCompact and Tightly Selective-Opening Secure Public-key Encryption SchemesPan and Zeng
2022ASIACRYPTUnconditionally Secure NIZK in the Fine-Grained SettingWang and Pan
2022EUROCRYPTNon-Interactive Zero-Knowledge Proofs with Fine-Grained SecurityWang and Pan
2022JoCSigned (Group) Diffie–Hellman Key Exchange with Tight SecurityPan, Qian, and Ringerud
2021ASIACRYPTSymmetric Key Exchange with Full Forward Security and Robust SynchronizationBoyd, Davies, de Kock, Gellert, Jager, and Millerjord
2021CRYPTOAuthenticated Key Exchange and Signatures with Tight Security in the Standard ModelHan, Jager, Kiltz, Liu, Pan, Riepel, and Schäge
2021CRYPTOFine-Grained Secure Attribute-Based EncryptionWang, Pan, and Chen
2021IEEE S&PDid you mix me? Formally Verifying Verifiable Mix Nets in Electronic VotingHaines, Goré, and Sharma
2020ASIACRYPTThe Direction of Updatable Encryption does not Matter MuchJiang
2020ASIACRYPTUnbounded HIBE with Tight SecurityLangrehr and Pan
2020CRYPTOFast and Secure Updatable EncryptionBoyd, Davies, Gjøsteen, and Jiang
2020IEEE S&PHow not to Prove your Election OutcomeHaines, Lewis, Pereira, and Teague
2020JoCTightly Secure Hierarchical Identity-Based EncryptionLangrehr and Pan
2019ACM CCSVerified Verifiers for Verifying ElectionsHaines, Goré, and Tiwari
2019ASIACRYPTShorter QA-NIZK and SPS with Tighter SecurityAbe, Jutla, Ohkubo, Pan, Roy, and Wang
2019CRYPTOHighly Efficient Key Exchange Protocols with Optimal TightnessCohn-Gordon, Cremers, Gjøsteen, Jacobsen, and Jager
2018CRYPTOPractical and Tightly-Secure Digital Signatures and Authenticated Key ExchangeGjøsteen and Jager
2017EUROCRYPT0-RTT Key Exchange with Full Forward SecrecyGünther, Hale, Jager, and Lauer
2016EUROCRYPTSafely Exporting Keys from Secure Channels: On the Security of EAP-TLS and TLS Key ExportersBrzuska, Jacobsen, and Stebila
2012CRYPTOEfficient Padding Oracle Attacks on Cryptographic HardwareBardou, Focardi, Kawamoto, Simionato, Steel, and Tsay
2007CRYPTOA Security Analysis of the NIST SP 800-90 Elliptic Curve Random Number GeneratorBrown and Gjøsteen
2005ASIACRYPTSpreading Alerts Quietly and the Subgroup Escape ProblemAspnes, Diamadi, Gjøsteen, Peralta, and Yampolskiy
1990AUSCRYPTFormal Specification and Verification of Secure Communication ProtocolsKnapskog
1989EUROCRYPTA Simple Technique for Diffusing CryptoperiodsMjølsnes
1989EUROCRYPTEfficient Offline Electronic ChecksChaum, den Boer, van Heyst, Mjølsnes, and Steenbeek
1988EUROCRYPTPrivacy Protected Payments: Realization of a Protocol That Guarantees Payer AnonymityKnapskog

Projects

Research projects in cryptography at NTNU with group members as project leaders or participants.

YearsProjectLeader / participantFunding
2026–2028QARC: Quantum-Resistant Cryptography in PracticeKristian GjøsteenHorizon Europe
2025–2031Cryptology and Social Life: Digital Identity WalletsTjerand Silde
Kristian Gjøsteen
NTNU: “A more resilient society”
2025–2028ToppForsk@IE: CryptographyTjerand Silde
Kristian Gjøsteen
Jeongeun Park
NTNU IE Faculty
2023–2024CRYPTO-LABTjerand SildeNTNU IE Faculty
2021–2026Realistic Cryptography for Large-scale ApplicationsJiaxin PanRCN FRIPRO
2021–2026OffPAD: Optimizing balance between high security and usabilityTjerand Silde
Danilo Gligoroski
RCN
2020–2028NORCICS: Norwegian Centre for Cybersecurity in Critical SectorsDanilo GligoroskiRCN Centre for Research-based Innovation
2020–2022Key Exchange for Today’s InternetColin BoydRCN
2019–2024Lightweight Cryptography for Future Smart NetworksColin Boyd
Danilo Gligoroski
Stig Frode Mjølsnes
RCN
2018–2025Secure, Usable and Robust Cryptographic Voting SystemsKristian Gjøsteen
Colin Boyd
RCN
2018–2022Trust and Transparency in Digital Society Through Blockchain TechnologyDanilo Gligoroski
Kristian Gjøsteen
NTNU Digital Transformation
2016–2020Cryptographic Tools for Cloud SecurityColin Boyd
Kristian Gjøsteen
RCN
2014–2015Group Homomorphic Encryption and BeyondColin Boyd
Kristian Gjøsteen
RCN
2011–2016FRISC: Forum for Research and Innovation in Security and CommunicationsStig Frode MjølsnesRCN
2008–2012Privacy-preserving Seamless Digital InfrastructuresKristian GjøsteenRCN
2005–2008TID: Time Stamps, Digital Traces and Forensic EvidenceStig Frode MjølsnesRCN
2004–2010Large Scale PKI ApplicationsStig Frode MjølsnesRCN
2003–2008Cross-faculty Research Programme in Information SecurityStig Frode MjølsnesRCN
2002–2013Q2S: Centre for Quantifiable Quality of Service in Communication SystemsSvein J. Knapskog
Danilo Gligoroski
RCN Centre of Excellence

Events we have organized