LeGrosDadai

It is because SIGMA protocols diagrams, as used in zero knowledge, kind of look like a capital greek sigma. It is not related to the other sign & MAC protocol.

I'm quite curious to see if the MILP solver would terminate (given the massive search space), my guess is not.

That's pretty cool, but isn't any computable function can be computed via FHE, so I'm not sure the differentiable part is necessary.

Ah, I see. That's indeed an interesting point. At any rate, IOT cryptography can use this standard as a building point, so it is a step in the right direction anyway.

By the same token AES is useless as well, because it doesn't address key exchange. This was not the goal of this standardization process.

There is a lot of cryptanalysis on it: https://eprint.iacr.org/search?q=ASCON Furthermore, it is not designed by NIST.

Related: https://www.usenix.org/conference/usenixsecurity23/presentat... and https://tosc.iacr.org/index.php/ToSC/article/view/12077

Why EU saw fit to buy very expensive proprietary software encryption, when there are open source standards, some of them designed in the EU itself is beyond me. Of course, you still someone to build the hardware and so on.

In chezmoi you can use gpg encryption: https://www.chezmoi.io/user-guide/encryption/