Cryptography PhD student @YaleACL, hadasze.me bluesky: @hadaszeilberger.bsky.social

Joined March 2022
Photos and videos
Pinned Tweet
Very excited to introduce Khatam (eprint 2024/1843): a new Proximity Gaps result for Multilinear Polynomial Commitment Schemes. Not only does it reduce the size of Basefold (including over Random Foldable Codes), but it also improves Blaze, WHIR, Ligero, and others. 🧵(1/x)
3
12
69
11,772
Super excited to be presenting Khatam (eprint 2024/1843) at @IACRcrypto in SB🌴! I initially wrote Khatam to show that BaseFold’s proof size can be as small as FRI’s. I proved that it is, even for field-agnostic schemes, using cool results from extremal combinatorics.
3
3
28
998
The downstream use cases include @GoogleQuantumAI (via Succint) and by Plonky3 and @ethereumfndn (via WHIR). All of it made possible - partly by Khatam and also by amazing work from the brilliant @UHaboeck (for the Reed-Solomon case). Suffice it to say: usefulness proved.
1
1
3
208
Surreal to witness and experience this journey, and thrilled that it's conclusion will be at the @IACRcrypto (one of my favorite conferences no less 🏖️)
1
3
190
1/7 At Ritual, we're building "super smart contracts" capable of arbitrary, cryptographically secured on-chain compute. Our endgame: real-time proving for the largest, most complex circuits (like LLMs). How? By hyper-specializing and only considering the tradeoffs we need. 🧵
Ritual is a lab for autonomous intelligence. The thesis is organized around what durable machine agency actually requires: emancipation from human control, strong privacy, mech design for compute markets, and consensus rules that can schedule and resurrect agents when they die.
1
12
704
6/7 Enter Cascade. For privacy-preserving inference where MPC/FHE latency is a blocker, we use token-level sharding. Instead of secret sharing, we distribute obfuscated prompt fragments across nodes for statistical privacy that runs 100x faster with 150x less bandwidth.
1
3
110
7/7 Real-time, trustless AI execution requires breaking away from standard cryptographic pipelines. We are building the custom stack to make it a reality. Stay tuned for more from Ritual Research. ⚡
4
94
Hadas Zeilberger retweeted
Professor Siavash Shahshahani, the head of the Math Department, talks about the damage to Sharif University as a result of an American/Israeli strike. Shahshahani's students included Maryam Mirzakhani. He was a significant figure in developing the internet in Iran in the 90s.
7
265
1,207
56,276
RT @BronzyGuevara: 🔴 Just a wee reminder, if you don't like Iran's Islamic authoritarianism, it exists because the USA overthrew a secular…
9,700
Hadas Zeilberger retweeted
A human consumes about 2,000 calories per day. Over 20 years, that’s roughly 17,000 kWh of total food energy. Training GPT-4 consumed an estimated 50 GWh of electricity. That’s 3,000 humans worth of “training energy” for a single model run. And GPT-4 is already dead. OpenAI retired GPT-4o from ChatGPT on February 13th. The model that took 50 GWh to train got less than two years of flagship status before replacement. The human you spent 17,000 kWh “training” for 20 years produces economic output for the next 40 to 60 years. The amortization window on GPT-4 was shorter than a car lease. Now look at what replaced it. GPT-5.2, released December 2025, is OpenAI’s current default. The GPT-5 series consumes an estimated 18 Wh per average query according to the University of Rhode Island’s AI Lab, up to 40 Wh for extended reasoning. That’s 8.6 times more electricity per response than GPT-4. With 2.5 billion queries hitting ChatGPT daily and GPT-5.2 now the default model, the inference math gets staggering fast. Even at a blended average well below 18 Wh, you’re looking at daily electricity consumption that could power over a million American households. This is what Altman is actually doing. OpenAI hit $13 billion in annual recurring revenue but still isn’t profitable. They need you to think of AI energy consumption as natural and inevitable, the same way you think about feeding a child, because the alternative framing is that they’re burning through enough electricity to rival small countries while racing to build 1-gigawatt Stargate data centers. The food analogy makes the energy costs feel biological and unavoidable instead of what they are: an engineering and business choice that scales with every model generation. The comparison sounds clever at a fireside chat in India. It falls apart the second you do the arithmetic.
🚨 SAM ALTMAN: “People talk about how much energy it takes to train an AI model … But it also takes a lot of energy to train a human. It takes like 20 years of life and all of the food you eat during that time before you get smart.”
411
3,169
13,977
1,325,188
Hadas Zeilberger retweeted
we can write a million essays about how the future Silicon Valley wants to build is underwritten by a deep disgust with / contempt for Being A Human, or we can just let them speak for themselves
🚨 SAM ALTMAN: “People talk about how much energy it takes to train an AI model … But it also takes a lot of energy to train a human. It takes like 20 years of life and all of the food you eat during that time before you get smart.”
69
1,418
7,196
228,682
Hadas Zeilberger retweeted
Like @davidbessis and others, I think that Hinton is wrong. To explain why, let me tell you a brief story. About a decade ago, in 2017, I developed an automated theorem-proving framework that was ultimately integrated into Mathematica (see: youtube.com/watch?v=mMaid2jY…) (1/15)
Geoffrey Hinton says mathematics is a closed system, so AIs can play it like a game. They can pose problems to themselves, test proofs, and learn from what works, without relying on human examples. “I think AI will get much better at mathematics than people, maybe in the next 10 years or so.”
128
490
2,807
848,334
Hadas Zeilberger retweeted
Finally out, the proof of mutual correlated agreement for RS codes, up to Johnson bound. I have let it circulate in the community about a year, but never found the time to make it public. For now without the improved bounds from the recent proximity gaps paper - but that will be upgraded soon. eprint.iacr.org/2025/2110

2
17
63
4,576
Super cool new work by Ron, Giacomo, Benedikt, and William - making the most efficient polynomial commitment schemes even smaller using tensor codes!
With the recent exciting flurry of excitement around proximity gaps, it's easy to forget what they’re actually used for - building polynomial commitment schemes (PCS), which are a key backbone of SNARKs. In this new work with the wonderful @benediktbuenz, @GiacomoFenzi and @kleptographic we construct a new PCS based on tensor codes and code-switching that is very close to optimal. ia.cr/2025/2065
3
246
Hadas Zeilberger retweeted
Sitting on the shoulders of giants, I am glad to announce the following paper with Eli Ben-Sasson, Dan Carmon, Swastik Kopparty, and Shubhangi Saraf: eccc.weizmann.ac.il/report/2… On the one hand, we improve the existing decoder analysis from Ben-Sasson, Carmon, Ishai, Kopparty and Saraf (BCIKS 2020), reducing it to an O(n) soundness error for correlated agreement up to the Johnson radius. In practice, it shows that degree 4 extensions of a 31 bit prime field (like M31, Babybear or Koalabear) are sufficient for FRI up to that radius, in many applications, considering that you are willing to grind. On the other hand, we provide additional counter examples that question the proximity gaps conjecture as written. Notably, over binary fields one cannot expect an O(n) error already *at* Johnson radius, rather a quadratic one. In general, proximity gaps stop at the distance where we have more than field size many proximates, meaning that we have to respect small gap to capacity. (See also the recent work of Crites and Stewart, as well as Diamond and Gruen.)

12
24
90
10,552