Donc maintenant, je vais laisser la flotte à Nicolas Théras. Nicolas Théras est président de la production d'exploration de TotalEnergy. Vous avez fait une bonne présentation hier. Et merci d'être ici pour cette session. Et maintenant je vais laisser la flotte à vous. Merci Olivier, c'est un plaisir pour moi d'être ici. Pour partager quelques commentaires sur le contexte de l'énergie Qu'est-ce que la stratégie d'une compagnie de TotalEnergy dans ce contexte ? Vous savez, en pensant sur le contexte de l'énergie, le premier point que je veux faire est que la demande pour l'énergie est augmentée aujourd'hui, ce n'est pas augmenté. Elle est augmentée parce que la population est augmentée, particulièrement dans les pays émergents, dans le sud global, parce que l'aspiration est aussi pour les standards de betterment de vie. Donc, nous devons rencontrer cette demande pour l'énergie. En même temps, bien sûr, nous avons des responsables collectifs, des compagnies, des gouvernements, pour adresser des changements climatiques. Il y a des impératifs pour acheter la neutralité du climat pour le plan. Le troisième point que je veux faire est que les gens veulent l'énergie, mais ils veulent aussi l'énergie adaptable. C'est un constat, vous savez, en France, en Europe, en États-Unis, en Brésilie, en Algérie, les prix d'énergie augmentent. Les gens vont à la rue. Donc, il y a aussi besoin d'aider, d'aider à faire de l'énergie disponible, mais aussi d'assurer que cette énergie est disponible. Et tout ça, dans un système où aujourd'hui, les fuels fossiles représentent 80% de l'énergie globale. Donc, une demande pour l'énergie, un impératif de neutralité du climat a besoin d'aider de l'énergie adaptable, même avec un investissement massive pour la transition de l'énergie, sur un point de départ qui est aujourd'hui 80% des fuels fossiles. Donc, je pense que si vous considérez ces 4 éléments ensemble, cela donne une idée de la magnitude du challenge que nous sommes face dans notre secteur. Je vais juste focusser un peu sur les énergies différentes. Aujourd'hui, l'huile est 30% de l'énergie. La production globale va faire une simple 100 millions de barres par jour. L'Energie internationale, j'en vois un nombre d'organisations, vous vous faites un forecast sur l'avenir de la production de l'huile, et quand est-ce que la production de l'huile se décline? A toute l'énergie, nous avons plus ou moins de production de l'huile dans les décennies, et nous sommes appartenus à décliner de l'Energie 2030, pour atteindre un niveau de l'esprit en 2050, quand nous voulons être carboneutriques, à quelque part, entre 40 et 60 millions de barres par jour, comparé à aujourd'hui 100 millions. Parce qu'il y aura toujours une demande pour l'huile pour un nombre de forces. Aujourd'hui, nous ne verrons comment ils peuvent être substituts. La réalité aujourd'hui est que la demande d'oil n'est pas diminuée. Nous n'y sommes pas encore dans cette curve. Cette année, la demande d'oil sera 102 millions de barres par jour, plus de 2 millions vers l'année dernière. Plus de 2 millions, pour vous donner une idée, une compagnie d'énergie totale est produire 1,4 million de barres par jour de l'oil, globalement. Plus de 2 millions dans un an est 1,5 fois la production totale. Il s'agit d'un projet de 20 à 30 barres, très large. Il s'agit d'un projet d'apprentissage. Je pense que c'est important d'understand que nous sommes allés voir un déclinage dans la production de l'oil, mais aujourd'hui, ce n'est pas encore le cas. J'ai parlé de la demande. Maintenant, l'oil de l'oil, je l'ai mentionné hier, mais je pense que c'est toujours important d'oublier qu'il y a un déclin naturel de production de l'oil de l'oil, ce qui est plus grand, par exemple, que pour le gaz. C'est à peu près 4 % par année. Donc, si vous n'avez rien fait, chaque année, de votre 100 millions de barres par jour, vous perdez 4 millions. En face de la demande, vous savez qu'il est augmenté de 2 millions. C'est pourquoi, dans notre compagnie, nous avons besoin d'investisseurs dans les projets de l'oil de l'oil, alors nous pouvons commencer, nous pouvons arrêter d'investir, mais si nous arrêterons d'investir, il y a très rapidement une grande balance entre supply et demand. Et très rapidement, les prix vont à l'aéroport et nous reviendrons à l'issue de l'égalité de l'énergie et de l'acceptabilité de tout ça. Le gaz. Aujourd'hui, le gaz est à peu près un quartier de l'énergie globale. Nous voyons que le gaz a une grande foule pour la transition. Simplement parce qu'il y a encore un grand potentiel de substituer des moules pour le gaz, ou des moules par gaz, particulièrement pour la génération de power. Le share de moules dans l'énergie globale est un peu plus haut que le share de gaz, par exemple. Le moule est à peu près un quartier de l'énergie globale. Donc, il y a cette substitution. Nous voyons qu'il y a une demande pour le gaz qui est en train d'actualiser dans les années à venir. Et une preuve importante pour le gaz pour être une foule de transition acceptable est, bien sûr, d'éliminer toutes les émissions de moules de la production de gaz, de la transportation de gaz et de l'utilisation de gaz pour s'assurer que le gaz est un contributeur positif pour la réduction des émissions de gaz. L'électricité est, bien sûr, le corps du nouveau système d'énergie parce que nous savons que l'électrification va jouer un rôle important dans la décarbonisation du système d'énergie. C'est un équilibre pour la transition d'énergie. Il va mobiliser certainement des investissements massifs, continuer à mobiliser des investissements massifs dans le futur. Not only in electric power generation particularly from renewables but also in transportation and networks. On power systems will become more and more complex at least as the way we see it with the massive arrival of renewable power generation and the impact it has on the management of power systems. On what we need to remember also is that electric power customers or users they want firm power, they don't want intermittent power which means that even if renewables will play a very important role in the future they need to be complemented by flexible power generation sources so gas fire power generation or storage by the way. So that's what I wanted to say as a few ideas about the energy sector and now let me move to what is the strategy of total energy what we are trying to achieve in this context which is both a challenging I would say exciting. Our strategy we summarise it very simply by saying we want to produce more energy with less emissions. More energy for the reason I mentioned because there is a growing demand for energy by a growing population and in total energies we expect to continue increasing our energy production while diversifying of course our mix with more low carbon energy. Less emissions at the same time and we've taken a commitment to decrease our greenhouse gas emissions by 40% between 2015 and 2030 and I will say a few words about how we are going to achieve that but my first message is that I think a number of our peers actually are pursuing similar strategies is to be able to supply more energy to people with less emissions which is a real challenge per se. So today we see our future activity on our strategy based on two pillars first pillar is oil and gas second pillar is what we call integrated power So to give you an idea today we dedicate about two-thirds of our investment our capital expenditure programme to the first pillar oil and gas so about 11 billion dollars per year and one-third of our capital expenditure to the second pillar which is renewable power generation low carbon molecules so two-thirds one-third 10-11 billion dollars for the first one 5 billion dollars per year for the second one which in fact is a massive shift compared to where we were five years ago where the second pillar was close to zero So for the first pillar oil and gas of course to achieve our more energy less emissions strategy we are focusing on oil and gas projects which are both low cost and low emissions low cost because we want our projects to be resilient through the cycles and I don't need to tell you that Olivier mentioned about the oil price variations over the recent period but we are in a very volatile market so all our new projects we set for ourselves criteria they need to have a technical cost below 20 dollars per barrel to be resilient at 50 dollars per barrel on low emissions because it's a way to achieve our target to decrease by 40% our greenhouse gas emissions by 2030 so what does it mean low emissions it means that when we look at the emission intensity of our production so the quantity of CO2 that we emit for one barrel or one barrel equivalent produced today the figure is 20 and by the end of the decade our target is to reach 13 13 kg of CO2 equivalent per barrel so to do this we work both on our existing production base on our new projects existing production base we are basically our emissions they are coming from our own energy consumption which is a majority of our emissions and they are coming from flaring so we are gradually eradicating in fact flaring routine flaring will be eradicated from all our facilities in a couple of years even if our target was 2030 and then we are deploying new technology to stop completely flaring including you know the safety flaring that we usually have in our facilities we have systems of closed flare basically today we can produce oil and gas with zero flaring energy consumption we are spending this year and next year 1 billion dollars to improve the energy efficiency in our facilities so we are doing like any industrial company willing to reduce its energy consumption we are installing combined cycle power generation units of short production facilities instead of traditional gas turbines we are electrifying our facilities or a number of projects with renewable power generation so we are taking care of our emissions you know and of course hoping that the energy users or customers will follow the same approach one principle that we set for ourselves is that all our new projects oil and gas projects must have a greenhouse gas intensity below the average of our portfolios the average of our production so by doing that that's the way we can reduce gradually the emissions from our production low emissions for us is also aiming at zero missing emissions because as I mentioned we see gas as a great transition fuel but provided we can eradicate missing emissions so we decreased our missing emissions by half over the last decade our target is to further reduce by 50% another 50% by 2025 and be near zero missing emissions in 2030 so I'm going to accelerate a bit talk about the second pillar of our strategy which is integrated power as I mentioned electricity was about 5% our overall production last year and we target to bring this to 20% by 2030 alors some people may say 20% isn't a lot but to go from 5% to 20% we need to invest every year 4 billion dollars in our integrated power business which is probably actually one of the largest investment by a single company in Europe in renewable in 2030 we'll have 4 billion dollars this year we invest 4 billion dollars in electricity power generation mostly from renewables so we've got this massive investment program we're planning to generate over 100 terawatt hour of renewable electricity by 2030 but then when we say integrated power our objective at the end of the day is not only to generate more renewable power but is also to provide firm power to customers which is what is required in fact so our strategy really is to integrate this renewable power generation with flexible power generation from combined cycle gas turbines with storage from batteries to manage intermintancy from renewables in order to be able to deliver this firm clean power to our customers of course we're trying to build an integrated power business which is also a profitable business because we're a company and we have shareholders and so we put a lot of energy and focus on producing better developing projects better at a lower cost and selling better for projects I think we recognize that you know there are a lot of utilities around the world which have much more experience with deeper power business than we have still we have a large offshore experience for instance so we try to focus on areas where we can be competitive such as offshore wind and of course I will finish with that because Olivier is telling me that I passed my time already but we also try to develop more and more multi-energy projects Good example of this is what we are doing in Iraq where we have four component projects where we develop the production from an existing oil field to generate money and part of this money is used to gather and process a lot of natural gas currently being flared in Iraq to supply power generation in the country and at the same time we develop a 1 gigawatts solar plant in the same area in the south of Iraq to supply power to local people and we believe that this kind of and there is a fourth component which is basically to build a large seawater treatment plant to be able to replace ground water being used for injection into the oil field in the south of Iraq by treated seawater and so to Olivier it's a hydric stress and we believe this type of multi-energy project today is a good solution a good solution for a responsible energy supply and it's also a good solution for the acceptability of what we are doing voilà I'm going to stop there Thank you for this very interesting presentation are there some questions on this presentation yeah please you push your button push the button yeah just one quick question on this Iraq thing you mentioned about natural gas flaring it's converting into electricity any plans by total or your partners there basically to monetize even deeper and more comprehensively to convert that into LNG for export no we've not the project is ready to supply electricity for the local requirements because the local needs are huge I need to know that today Iraq there is a lot of gas being flared in Iraq but at the same time the country is importing gas from Iran in fact so you know the idea is pretty simple is to supply gas for the local power generation plants which are existing already and to substitute import by local production so no plan for LNG simply because the demand is there plan to capture all that gas which is being flared so that it can be monetized maybe for the benefit of the local population of the local economy the plan is to collect all this gas currently being flared to process it to commercial specs and to supply it to gas fired power plant but locally thank you very much on this talk Jeremy Finn from Blue Water Intelligence I have a question regarding a peak so in any system energy system there is a the system needs to be balanced and you mentioned that you are developing battery capabilities to handle the peak in a low carbon way so there are other ways so first of all what is the capability of your batteries at the moment because it's not simple technology at large scale and are you considering other energy sources and typically intermitted energies are not the solution for peak typically countries look at either nuclear or hydropower nuclear for capability, hydropower for storage dams in particular so are you looking at these I believe nuclear no because it's written in your report but who knows and how about hydropower are you considering these three questions battery capability nuclear yes or no and are you looking at hydropower thank you very much battery capabilities we assess it for each project depending on what is the market what is the demand structure what is the pricing structure what is the customer requirement whether we set on a derigulated market you know merchant way or whether we have a PPA with an industrial customer to which we need to provide firm power but typically for a large portion of our renewable projects today we associate them with battery and you are asking what is the size of your storage it depends but for a 1 gigawatt typically for a 1 gigawatt renewable project we have a storage capacity ranging anywhere between 300 to 600 gigawatt so it's pretty large in fact so that's for batteries yes you're right battery is not the only solution to manage intermittency you know we are doing it in a there is pump storage hydro other ways to do it and we are looking at this definitely we are looking at always actually to manage intermittency nuclear no we are not nothing in nuclear which doesn't mean that we don't believe nuclear is a good solution I think nuclear is as a role to play decarbonise the energy mix and we certainly recognize that but it's not our competency you know we are doing we have our two pillars we have no experience nuclear is complicated and then we tend to think also for you know we are looking also at the long term liabilities on we think like for private company like total managing the long term liabilities associated with nuclear is not easy thank you you have the floor Renaud Girard from Le Figaro should I speak French because everybody understands French I don't know it's not translated so I will speak English I would like to know the impact of a small geopolitical event that happened in February 22 invasion of Ukraine by Russia on total business what was the shift of your business so can you tell us the shift of business between January 21st and January 2024 and how much it cost to the company this small geopolitical event and how could you face it did you have like reserve did the government help you did European Union help you how did you face this change of business so on this first the impact on our business I think we communicated fairly openly and clearly what business principles we decided to apply after the invasion of Ukraine first thing that we abide with sanctions no matter what is the impact on our activities and we are doing so second what we did immediately was to stop purchase of oil and petroleum products from Russia then we started a gradual withdrawal of winding down of our activities we had one oil production field in Russia Karaga that we sold we exited that we had a gas field for domestic supply and then you know we communicated that we deconsolidated our interest in Novatec we kept an interest our interest in Yamal LNG which is a decofection plant supplying Europe one of our principles being that we continue to supply LNG from Russia to Europe as long as European governments actually are considering that this is desirable and that there is no sanction of that the cost of all this I think is public because you know we took total depreciation on Russia of 14.8 billion dollars to be specific so close to 15 billion dollars 14.8 no the government did not help us it's not a practice in the company to ask for monetary support from the government I don't think we would get it anyway so we are trying to manage our business by ourselves yes it can be the other way around you mean that you are not like the big banks you don't when you have a problem you don't ask the government to help you no no no there is a in fact the it's a hit you know on the business of the company but it's a hit that the company can manage we have a limit in the amount of capital employ that we put in each individual country so in Russia we were at the higher end not far from the limit but it's the same rule and actually the Russian crisis has demonstrated against us that we need to stick to that rule what is the maximum it's 15% per country 10% ok so that's that's what I can say after of course there is an impact on our production you know total energy was if you look at our reports annual reports we were 2.8 million barrels equivalent per day company 2 years ago today we are at 2 last year we are at 2.4 there is a gap we are developing our LNG business outside Russia you know so we have a number of projects we recently announced that we joined Rio Grande LNG in the US we are preparing to take a final investment decision on Papo LNG we are participating in the very large north field expansion in Qatar in those 6 new LNG trains we have Mozambique LNG we are participating in expansion in Nigeria LNG and Oman LNG so we are growing our LNG I would say from outside Russia we increased actually a lot of LNG imports to Europe from other sources last year and I think we contributed in a meaningful manner to the continuity of supply of gas to Europe so that's the way we are doing thank you I think that's a good opportunity


It is quite a job to have a video out every week. It's a nice job, so I won't complain. But since I also have a private life, like currently expecting my third grandchild, showing some gratitude to those that financially support this channel through Patreon or Paypal, got delayed and delayed again. And that's wrong. Those of you that have granted me financial support help me to stay independent. I will say it again here, there is no objective journalism but it is important to know that my opinions are really my opinions and were free of financial stimuli from manufacturers. There is nothing wrong with advertisements but they must be 100% separated from editorial content. It has to be clear who says what and why. In all honesty. Using the channel financially, you give me the room to keep it separate. You can do this on a monthly basis through Patreon and see some extra videos or donate when you like through Paypal. Again many thanks to you all.


Hello and welcome to the session. In this session we discussed the following question which says the relation between total cost c and the output x is given by c is equal to 4x into x plus 9 upon x plus 7 the whole plus 3 proves that the marginal cost falls continuously as the output increases. Before we move on to the solution let's discuss what is the marginal cost that is mc this is equal to dc by dx where the c is the total cost and x is the number of itals produced and the average cost that is ac is equal to c upon x that is total cost upon the number of items produced. Now we have a relation between ac and mc which is d by dx of ac is equal to 1 upon x into the marginal cost minus the average cost the whole. Now if we have the marginal cost is greater than the average cost then in that case d by dx of the average cost would be greater than 0 and this means that ac increases with x and the ac curve is rising then next if we have the marginal cost is equal to the average cost then d by dx of ac is equal to 0 which means that ac is constant and the average cost curve remains constant at all levels. Then next condition that we have is if the marginal cost is less than the average cost then we have d by dx of ac is less than 0 which means that the average cost decreases with x ac curve is falling this is the key idea that we use for this question. Now we proceed with the solution in the question we are given the relation between the total cost which is c and the output that is x as this and we have to prove that the marginal cost falls continuously as the output increases. We know that the marginal cost is dc by dx so now we have the function c which is the total cost function that is cx is equal to 4x into x plus 9 upon x plus 7 the whole plus 3. Now the marginal cost which is mc is equal to dc by dx so mc is equal to d by dx of c which is 4x into x plus 9 upon x plus 7 the whole plus 3 the whole. Or we can write this as mc is equal to d by dx of 4x square plus 36x upon x plus 7 plus 3 the whole. So this gives us marginal cost mc is equal to x plus 7 the whole square of the denominator. Then in the numerator we have x plus 7 the whole into d by dx of this which is 8x plus 36 the whole minus 4x square plus 36x the whole into 1. Now this whole plus d by dx of 3 which is 0 so further we get mc is equal to 8x square plus 36x plus 56x plus 252 minus 4x square minus 36x and this whole upon plus 7 the whole square. Further mc is equal to 4x square plus 56x plus 252 upon x plus 7 the whole square. Then mc is equal to taking 4 commons on the numerator we have 4 into x square plus 14x plus 63 upon x plus 7 the whole square the whole. Now x square plus 14x plus 63 can be written as x square plus 14x plus 49 plus 63 minus 49 so further we can write x square plus 14x plus 49 as x plus 7 the whole square plus 63 minus 49 which is 14. So here we have marginal cost mc is equal to 4 into x plus 7 the whole square plus 14 upon x plus 7 the whole square the whole or we can write this as mc is equal to 4 into 1 plus 14 upon x plus 7 the whole square the whole. Now as we had the condition that to show that ac decreases with x we have to show that dy dx of ac is less than 0 and this will prove that ac curve is falling. Similarly as we are supposed to prove that the marginal cost falls continuously as the output increases we need to show that dy dx of mc is less than 0. So next we will find out dy dx of the marginal cost mc that is dy dx of 4 into 1 plus 14 upon x plus 7 the whole square so this is equal to 4 into dy dx of 1 plus 14 upon x plus 7 the whole square the whole. Which is equal to 4 into dy dx of 1 is 0 plus 14 into minus 2 upon x plus 7 the whole square that is we get dy dx of the marginal cost mc is equal to 4 into 14 into minus 2 upon. x plus 7 the whole cube which is equal to minus 112 upon x plus 7 the whole cube this is dy dx of the marginal cost mc now this is less than 0 for all values of x as we know that x would be always greater than 0. We can say that as dy dx of the marginal cost is less than 0 therefore the marginal cost mc falls continuously as the output increases hence we have proved this so this completes the session hope you understood the solution of this question.


Welcome to the Everton News Daily. Everton today have reportedly opened to handing Delhi a new deal this summer. Delhi is apparently keen to remain in the Premier League and he has made a good impression on manager Sean Deitch. He's still keen to do something of Everton. We've hardly seen him at all. He's made 13 appearances. The last time he pulled on and Everton's sheet was at the start of the 22-23 season. He's got a positive relationship with Sean Deitch. That is according to an article in The Athletic. Everton have been very supportive during the midfielders rehabilitation and Sean Deitch has checked regularly on how he is during that time. I think Deitch may see him as the perfect man to replace Abdelhaid y Cori, not necessarily in the start and 11 but someone within the squad. The issue here of course is that there is a deal in place that once he makes 20 appearances for Everton spares her own money. Now his contract does expire on June 30 but apparently there's a sort of backstop in the contract that stops him walking out. Everton on a 3 on the 30th and resigning for the football club in July without Tottenham getting some sort of kicker. Everton, if they really want to keep Delhi then they're going to have to come up with some deal with spares. I don't understand at what level will be acceptable for Tottenham to drop from £10 million to £5 million then how would Everton justify £5 million for a player that hasn't been fit. Listen, if Delhi come back and I've said it all the way through his Everton career and got back to 60-70% of what he was at spares he'd be really good to having the squad and really good to having the team. There's no evidence of that right now because injuries have ruined them. Now Shaun Dite hasn't ruled them out being fit before the end of the season and therefore we may still get to see him play a few games at the end of the season and who knows we might really need them at the end of the season as well. So this is going to be a bit of a watch this space with this one but it has caught quite a few people by surprise because it's just seen as though Delhi's contract was going to run out and he'd leave the football club but we'll have to wait and see whether anything happens. Last night the Times reported that the Premier League is set to hold face-to-face talks with 777 partners as part of their final decision making in the process to see 777 take over Everton. That story is doing the rounds from quite a few sources now and it seems as though that is the final kind of hurdle that they've got to go over before they'll be approved as Everton's new owners. This is something that needs coming through a close whether they are given the green light or whether they are told no. This needs to end right now, this deadline because it should have taken 12 weeks, we're in week 24 and there's still no final decision it seems. I would suggest having a face-to-face meeting with someone kind of means that it's all but done. This is what we've just seen recently with Jim Rackliff, he had a face-to-face meeting with the Premier League before they ratified it and I imagine similar will happen with 777 but who knows but what I am saying on is this decision one way or the other can't go on much longer because it's damaging our football club and given what the Premier League have done to us in terms of points deductions and the next charge, this is just another facet to what seems like them being really vindictive towards Everton Football Club. If that isn't the case, make the decision very quickly and let's move on. And apparently Everton invented the race for 22-year-old African centre midfield player Rafael Oñedica, he plays for Club Bruges, he could cost around £15 million this summer, he's made 73 appearances for Bruges since arriving from mid-Jetland and has made an appearance in the recent Afcon for Nigeria, Nottingham Forest and Crystal Palace also interested in the 22-year-old, the story goes on to say that he could well be a replacement for Belgian midfielder Amadou O'n Arnau who is tipped to leave Gulsun Park this summer. And finally, Ben Godfrey has revealed the positive influence of manager Sean Deitch on Everton's dressing room and also on a personal level. After a test on first half of the season, Godfrey said you can definitely feel a new atmosphere, the manager has brought a lot of positive to the club, I think we feel tighter as a group, we can have a laugh as a group, everyone is on the same page, everyone gets involved and everyone new is made to feel welcome. Sean Deitch has been supportive throughout what is a tough period of not playing and as much as whether that is being complimentary about how I've been training or when I'm in the team, the encouragement I've had has been a good for me. For me it's been purely being ready to perform every time I get my opportunity and keep helping the boys out as much as I can because as a group we just want to keep putting points on the board and make sure that we are safe basically. We're moving away from the relegation zone which is obviously where Everton have been due to the points deduction also says to be honest I enjoy playing centre half most but I'm always open on doing a job in the full back areas when it is needed and of course Godfrey has got into the team recently, it's done quite well so good to know that everybody is on the same page and we have to start winning football matches now and let's hope that begins on Saturday Gulsun Park in a tough game against West Ham United. That is it for the news today, do give the video a thumbs up, subscribe to the channel if you haven't, if you want to become a Toffy TV Premier member where you can watch all the stuff with no outfits, the link is in the description and the QR code on the screen now. See you later.


Hey thanks everybody for joining us today. We're excited to get to talk about some of the uses of Istio beyond Kubernetes. You know kind of since the project came out it has kind of always been tied to Kubernetes at least in people's minds and but that's not actually the case in production right and what's more most of our production footprints are not only Kubernetes right and so there's a real need for taking the service mesh beyond just Kubernetes itself and today I'm really excited we have a phenomenal crew here to kind of talk through some of how we do that and how we've seen that hands-on. So hey to start with I'm Zach I was one of the founding engineers at Tetrate and I was one of the earliest engineers on Istio at Google. I'm Prati Manambiar I lead the teams that build and operate the mesh platform at Salesforce. And I'm Sven, I'm one of the founders of Istio and I've been pushing for us to support things beyond Kubernetes since day one. Awesome and so today I'm gonna start off and I'm gonna talk about some patterns that we've seen for taking Istio beyond Kubernetes. These actually come out of kind of two customers that I've worked with very closely to help achieve these deployments in production and then after that we'll dive into kind of two more excellent case studies from both Salesforce and Google that really are applying a very similar set of patterns here. So without further ado let's go ahead and dive in. And the first kind of pattern that we'll talk about or the first use case is this idea of split Kubernetes and VMs right and maybe this is all in one cloud provider you know so you're doing like EKS and EC2 or GKE and GCE or possibly your on-prem right and this is your vSphere footprint plus you know like openshift that you're running locally right but the particular customer that I worked with through this scenario of bridging EKS and EC2 environments kind of took this migrate then modernized strategy of hey let's get everything into cloud so we can shut down the data center and then we're going to work incrementally within our applications to modernize them piece by piece right and as they were looking at this problem set for them there were these four primary use cases that rose to the top right so number one was encryption and transit they're a financial services company they're heavily regulated because of things like PCI DSS all data must be encrypted in transit that was kind of the first key thing that they wanted as a corollary to that they additionally wanted consistent access policy based on those runtime identities those two kind of go hand in hand really beyond that they needed fine-grained load bouncing and I'll talk about that a little bit and then one of the other big use cases and this is one that I see all the time in in this idea of kind of bridging heterogeneous environments is controlling how traffic flows to for example the legacy monolith and the newer microservices that are being decomposed out of that monolith and so if we look here at this at this picture to start with you know maybe we have EKS and EC2 the one of the important kind of underpinnings here is that we have a common certificate authority and this will be a pretty common I think trend across all three of ours we need that common certificate to facilitate communication right and so that'll live somewhere kind of outside the mesh in general I would recommend strongly that you root your mesh's root of trust in your existing PKI and we're going to have an Istio deployed and it is going to be and it's going to manage kind of all the envoys nearby in this case you know maybe this is a single AZ for example and so we can those EC2 instances are close enough to that Istio that they're going to have roughly a shared bank we want to align our failure domains right in this year it's going to program everything like normal with the exception of some service discovery information we'll dig into a little bit here and so now what I want to kind of sort to pick through here is how a deployment like this starts to facilitate traffic flow and achieve kind of some of these four needs so first and foremost we should talk about you know the the easiest case which is how do we get traffic from existing applications into the new system into Kubernetes for instance and that's a bog standard to raise ingress use case and you know you'll go in through a gateway in that gateway can have you know an assigned static IP address a DNS name whatever it needs but much more interesting is then how we start to facilitate communication into the non-Kubernetes environments and so the first and easiest that I'll call out is this ability to just go in through a front door Envoy and this is super easy to facilitate that Envoy can have you know a static DNS name a static IP address for example so you don't necessarily need to execute service discovery on it but you do get some of the nice kind of control that Envoy gives as traffic flows into these VMs and in particular one of the big things that this lets us do is split traffic as we're for example decomposing that application that's on a VM and as we split that traffic you know that can go to different places that can go maybe to a different cluster maybe that can go all the way to a different site or a different region and this is one of the things that we'll kind of talk about as we circle back at the end but ICO gives us this this set of tools for solving problems and we can reuse them to solve many similar problems so controlling traffic split across for example a VM deployment and Kubernetes deployment looks very similar to controlling traffic across for example sites as failing over for for disaster recovery and so this is this is one way hey you know we can go in through these front Envoy's but there's other ways that we can start to wire this up and how you ultimately choose to use the tools that ICO provides is going to depend on your site and so for this particular customer that I worked with they actually had an existing legacy service discovery system it was based on on zookeeper I think actually we'll hear about Salesforce and then they have a very similar system it was in vogue at the time that both of those companies were built and their applications automatic on VMs automatically registered with that service discovery system for them it was important that we didn't have these extra network hops because the overall latency of the of the transaction was pretty important and so they wanted to facilitate direct VM communication and we were able to do that in a pretty straightforward way by taking their existing kind of zookeeper service discovery records and translating those into services into service entries for Istio in a pretty natural way and I'll point out you know we had to do this kind of bespoke in their sites because they had a homegrown service discovery system as you're starting to use like different cloud providers that are that are starting to provide different service discovery mechanisms changes are pretty decent that there are already some integrations around right so for example ec2 populates a cloud map registry for service discovery and and Istio there are plugins for example to to push that data into Istio so this isn't necessarily something you have to build yourself but this is a totally valid way to set things up and and when that we see a lot we have folks running in production doing you know direct pod to VM connectivity in this in this way and then of course for for VMs that we might actually enroll into the mesh and when I say enroll into the mesh what I mean is deploy a sidecar there and that's another important idea I want people to understand you don't necessarily have to have a sidecar deployed there it'll deploy change your security model but you can get some benefits from just having kind of this this doorway Istio ingress gateway as well but when we do have an envoy on that VM we can use some of Istio's new auto registration capabilities I think some of them we'll talk about that later to know exactly where that that VM is where it lives in Istio and enable that direct communication without having to do that kind of lifecycle events off to the side and so you know looking at these we can there's you know some easy ways that we can facilitate traffic flow we might pick different ones based on our requirements and they give us these other capabilities for example fine grain load balancing in this particular customer site fine grain load balancing let them drop their Kafka footprint by to one sixth of its original size because they weren't doing this at connection level so there's some big benefits there that you can get putting into the envoys for the for the load balancing and then facilitating some of this connectivity and now I kind of want to take a step back to one higher level which is what if we need to start to do similar things across sites right and and the particular customer that I have in mind here square has to do this they have legacy data centers where they run applications and they run those in a mix of VMs and and Kubernetes as well and they have a cloud footprint too and their first two requirements were identically the same I need to encourage them to train that I need consistent access policy again their financial services company it's it's incredibly important but then they and and they had that same Kubernetes to VM within a single site right that right side picture is is identical to before however they had the additional requirement that they needed to be able to fail across sites for example for disaster recovery as well as the need to burst into cloud for additional compute capacity for them they have very you know time of day driven traffic patterns for example and the need to and and so you know for for certain events like market open market close those kinds of things there's a lot more traffic and so the ability to burst into and not run over provisioned all the time is is absolutely massive and if we look you know I'll take kind of that that first example we have you know we have or I'll take one of the examples I dove into before where we have traffic coming in and we want to control how that flows across for example VM and Kubernetes cluster by the same token we can control how we flow across sites and if we squint and look you know these two patterns are the same they're they're doing the same things they're they're achieving very similar goals as well and so I want to kind of highlight that is to give us a set of tools around how we can load balance and when I say the same let me let me dig into that for a minute as an application running on this this in the mesh I get to communicate with my dependencies using a name and really not dealing with anything else and the message is going to deliver that and so when I say this is the same how the application perceives or connects with other applications is identical throughout and so you know and and we're doing similar functionality at several places even this is an important idea because again isio gives us this set of tools that we use for solving the problems and so it's important that we internalize kind of what those fundamental tools are because we can use them and so in this case having that ingress gateway that can that can load balance across multiple clusters is a incredibly powerful tool um but there is one other large problem that I kind of skipped over earlier that that is introduced now that we have multiple istio d's here which is we need to start to coordinate our configuration in the system and synchronize that and that's a that's a problem that isio itself does not solve natively today there are some different deployment topologies you can use with less istio d's here for example in things like that but regardless of which deployment topology you pick you are going to have to solve how you start to synchronize configuration across different clusters and there's a whole bunch of different options there I think spin will talk about some at linkedin or in a little bit more depth in his section but the general rule is you know use the sd plus your your existing cd system to start to facilitate that and with that you know and and so these are kind of two concrete customer patterns that that I have personally seen firsthand uh to to start to facilitate communication across these disparate environments um and with that I think we'll will now kind of dig into uh some other examples that they use that are that are very very similar I think thank you Zach um if you can go on to the next slide yeah sales force um service spans multiple well service spans services that run on diverse infrastructure for example in our first party data centers we support services that run on bare metal communicating with services running on Kubernetes our monolith runs on bare metal in first party in our public cloud deployments we have services running on VMs and Kubernetes talking to each other via mesh um about four years ago when we built our mesh platform using on boy and our in-house control plane we had to support these services running on these diverse infrastructure and therefore when we wanted to adopt a open source product as our control plane a couple of years ago um the minimum viable solution had to support bare metal VMs and Kubernetes so we chose Istio since it is a featured rich control plane and that it meets our growing requirements and it is solving the problems that we are trying to solve and therefore is a good fit for sales force um let's take a closer look at what our mesh platform with Istio as our control plane looks like um we run Istio D on Kubernetes which is the control plane um and Kubernetes services inject sidecar and communicate with the control plane for config updates and policy updates we have a config webhook that generates some Istio config for our services um and um sales force requires us to use an internal ca for shock lift certificates so we configure both our control plane and our sidecar to use these certificates um generated by our internal ca for mtls um we run our sidecar next to um our monolith on bare metal and it communicates with the control plane via a l4 load balancer the monolith announces to zookeeper so zookeeper is our service registry for non-cubinities workloads and then we have a synchronization service that synchronizes these announcements in zookeeper and updates service entry objects in cubinities um the service entry object is similar to a cubinities service object and it is used to represent a service um that can participate in the mesh let's take a closer look at how to onboard a service that's running on bare metal onto Istio's based mesh um we manage the life cycle of the Istio proxy sidecar um by the monolith so the monolith does that for us um the Istio proxy is as i've mentioned before configured to use certificates that are delivered by that same internal ca and the service routes traffic to a special ip to participate in the mesh and we have a dns a wildcard dns that results to the special ip and it is used to reference all mesh services um in in the mesh um we also configure a sidecar resource it is a custom crd that's available um that's provided to us by Istio and we configure ingress and egress listeners at that special ip um via that sidecar resource and then as i mentioned before the monolith announces to zookeeper and that gets synchronized to cubinities as service entry objects and that is how um our bare metal service is able to participate in the mesh as if it were running on cubinities um the next slide yeah we are in the process of rolling out a new feature that was introduced in um Istio 1.8 and this is the auto registration feature um adopting this feature will allow us to get rid of that zookeeper that we use for service registry for non-cubinities workloads um the auto registration feature of Istio supports a set of crd's to represent non-cubinities workloads to enable them to participate in the mesh um for example there is a um workload group um crd that enables you to specify the properties of a workload for bootstrapping it and as a template for workload entries it's kind of similar to how you um you can use a deployment object in cubinities to define the properties of workloads uh via a pod spec um a workload entry um crd represents a single workload similar to a pod in cubinities and and i as i mentioned before the service entry is similar to a cubinities service object for non-cubinities workloads so in our deployments we create the workload group um with the workload entry template um we pre-create it and the um Istio proxy that runs next to our monolith on bare metal or a service on bm um connects to the control plane and the control plane auto registers and creates that workload entry um object that we talked about um similar to how a pod is created in cubinities um and then you can choose to create pre-create the service entry object um but we create that service entry object via a config uh webhook which listens for those workload entries so we don't have to pre-create it um and that is kind of how we um hope to adopt the we're in the process of adopting the auto registration feature so that we can get rid of that zookeeper um that we run today everything i said so far also holds good for vms and vm for vm-based services we deploy the proxy using our p.m um Istio 1.8 also supports a dns proxy feature um at the sidecar so adopting that feature will allow us to remove that special ip and dns that i talked about earlier to refer to mesh services the sidecar can be used to resolve dns entries of any mesh service for example a non-cubinities workload can refer to a cubinities workload with the cubinities dns name we use this feature today to resolve services running on different um cubinities clusters as part of our multi-cluster mesh support and we will be using that for non-cubinities workloads as well i hope that gives you a feel for how Istio is being used to support services running on diverse infrastructure at Salesforce i will now hand it off to swen to talk about how google uses Istio beyond cubinities all right thank you uh Pratima and thanks Zach for the the introduction there um so i'm gonna just really briefly touch on actually a lot of the same kind of stuff um you'll see a lot of similar patterns here um just like just like Salesforce google is running uh services in on-prem data centers as well as in cloud um the the group i'm going to talk about here really is google's internal corporate um engineering team that builds and runs a lot of our internal services um i think one of the the fun ones that actually they were starting with here is a system that provides menus of the cafes it's not been very useful the past year but that was a great app way before all this pandemic stuff happened um so we run applications uh these corporate applications both on cloud and on-prem um and in both cases we're using the service mesh for kind of all the stuff that everyone uses service mesh for right so the micro segmentation of the application layer so you don't need to do network firewalls operations management uh the encryption requirements you know that Zach was talking about for financials uh google has the same sort of encryption requirements on everything um and on just making releases easier to roll out and say right using the canary support so those are kind of the main use cases um so within those let's look at uh the the applications running on google cloud platform um so this is a mix actually of internally written applications and also uh vendor applications provided by um vendors that google works with an interesting thing there is that because of the way Istio works you can actually just take those vendor applications and run Istio on them without having you know having to have the source or anything and that's actually a huge benefit um so you can you can get all these controls without having the source um and again this is a mix of of VMs and containers and serverless um we kind of use everything and we want them all to be able to talk to each other and to talk to the services running either on-prem or actually in our production environment um so we sort of need everything to be able to talk to everything and and Istio is a big help there so for our on-prem environment um we have basically the same stuff actually so we have you know this mix of vendor applications and custom built internal applications um here actually it's mostly VMs for on-prem there's not yet a lot of uh container usage we are starting to experiment with uh google's anthos product um to provide on-prem kubernetes and then get um containers there but right now it's pretty much just VMs and uh for these on-prem data centers we actually connect both to google cloud and to the production services kind of through the front doors of those services so there's no there's no back doors here everything goes in as if it was you know anyone else all right um so let's uh let's take a look at what this actually looks like again this is kind of at a at a high level here um so Zach was talking about the the configuration distribution problem um so we actually already have a whole system in place for this that is set up to distribute sort of a lot of that lower level networking um configuration things like the the network ACLs and firewalls and other policies on projects and things like that um we're just reusing that system and you know adding a plug-in to support sending out the um the Istio policies so that is how we distribute all of our policies to um to all the api servers and that actually provides a sort of paper trail if you will from source control all the way to the end state so no user is directly modifying anything in an api server right there submitting things to our internal repository those changes are then vetted and then rolled out um carefully to the entire fleet and it makes it a lot safer and you know you have your audit trail and all that kind of stuff um we we're actually running Istio here as a separate external service using the support um that was added for external Istio D forget if that was in one seven or one eight but um it's available now and actually we're taking advantage of it um this lets you run an Istio D that is not actually in any cluster you can run it uh you know however you want you can run it on vm you can run it in a separate cluster that you manage um you can run it in serverless ways right there's lots of opportunity to manage it without having you know the people that are running applications having to worry about this dd and and care about it and feed it um so we run that and that is hooked up to read from the various api servers um in the in the mesh uh we are using auto registration that pertina top talked about um so the vm's they're running sidecars um those sidecars auto register we automatically create the workload groups um for those based on the the um configuration stored in the policy manager and so you know the whole system just kind of works and everything can talk to each other um the vm vm envoys and the pod envoys all just connect and manage all the way they get their configuration and you know everything just works so it's great um so that's that's a quick rundown of of how uh google is using Istio internally well awesome thank y'all uh so just to kind of to come back and summarize right if if we look through and then look at like some of the high level topologies here that we kind of talk through across these four use cases and we squint you know fundamentally we're really solving the same set of problems here right this this cross cluster cross site connectivity and Istio gives us this really powerful set of tools we saw across these disparate organizations we weren't actually working particularly closely together any of the three of us around the development of these separate systems right uh but all of us converged at at architectures that are that are you know very similar right and and even some of the lower level tradeoffs for example that predima went over uh and and how you know envoys connect and those things are exactly things that that we've seen firsthand that i've seen firsthand you know so and i think you've seen some more things as well and you know and that for you know as a group of folks that are also helping build these tools that's incredible that's awesome and exciting because it says hey our tools are actually solving some problems um and and you know their Istio today gives us this powerful vocabulary gives us these powerful set of tools for for solving these these problems um you know there's maybe just a little bit of roughness around wiring it up at the edges and there's and there's trade-offs that you're going to want to make in the context of your particular deployment and the security posture that that you need to maintain and and all of those things there's no one size fits all uh but the the primitives are there uh and they're powerful they're robust and they're in they're tested to be able to go do this yourself and with that uh thanks everybody for coming any any closing comments uh predima spoon the the y'all want to make all right i'll echo what you said zack that the like seeing other people use this stuff just you know makes me so so incredibly happy and proud right of just uh and especially like you know i i worked i worked a lot on figuring out uh workload group and workload entry and auto registration and like making that a work and it's so it's so exciting to see someone say yeah you know we're starting to adopt it and it's going to solve problems for us right because that's what we're we're here to help solve problems so super exciting um i think you guys summarized it well i and um we do feel like we've made the right choice as we adopted um is to use our control plane for sales force um yeah that's all i have to say all right awesome thank you all we look forward to questions uh everybody have a good day


I have a lot of mixed feelings about the Giants while I like their staff additions and changes in the off-season. I still have major concerns about the roster, so let's run through the schedule. In the first four weeks, I could see them getting wins against Carolina and definitely in Chicago on week four. I think they definitely lose both of week five and six at home against the Packers and the Ravens. And then they head into the easiest four games on paper of their schedule at Jacksonville, at Seattle, by week, home against Houston and home against Detroit. They could definitely get three or four, maybe even one or two wins depending on how those other young teams play. But I'm going to give the Lions the win in week 11 at MetLife Stadium, but the Giants get the other three. I'll take Dallas to sweep them on the season, and then I think they end up splitting with Washington, so I think the Giants will take week 13, and Washington will take week 15. And even though I do think the Eagles are a significantly better football team, I'm going to give the Eagles and Giants a split. I feel like they always split every single year, but I do think the Giants lose the other games to finish out the season, and they end up seven and ten.


So let me run this presentation about the initial symbol and the model to operate in CMATIS games over primitives. The motivation of this work requires a design of CMATIS communities over primitives that are efficient in the third application, like a multi-party computation, full-in-off equation, or zero-nation. Now depending on the application we target, we need a different CMATIS community, like for example, in some cases we have a function, in some cases we have a software, or in some cases we have an image function. However, all these applications have some things in common, in particular the fact that this application usually works over primitives, where P is a large prime integer. So using these for the two-rebar model and two-rebar model, one out of the three-physics is quite a bit bigger. Now to the size of this prime, the only area of the CMATIS community that we design for being efficient in this application cannot be pre-contributed and stored as look-up tables. These are quite different from traditional schemes, like a gas or gas rocket, in such case the S-box is usually fine over a small binary feed, like over 8 feet or 5 feet, so the S-box can be potentially pre-contributed as look-up tables. Here it's very easy to understand that, till the size of the prime, this absolutely is not possible. This means that the CMATIS community designed for this kind of application, in particular the only area of the CMATIS community has a simple algebraic expression, must have a simple algebraic expression, because the non-linear layer must be complete, on the file. For example, in many cases these non-linear layers are just polymers. Now in this paper, we consider that it is possible to set up a permutation over a prime feed, which are defined in a real-action symbol or demolute to paragraph. And besides presenting many permutations over a prime feed defined in this way, we also realize the security of CMATIS community that are instantiated via such non-linear layer. In particular, we propose a generic attack on a CMATIS community whose non-linear layer is defined in a real-action symbol and what it will do later. And we propose a complete attack, a complete brainage attack on this function in Raleigh, which has been recently proposed on event. So the first part of this presentation, in this first part of this presentation, I'm going to present several permutations that we proposed in the paper that are set up in a real-action symbol or demolute to paragraph. And in the second part of this presentation, I'm going to present a part that I just mentioned. First of all, let me recall what the real-action symbol is. So we have, so we have b that is a prime integer, we assume that b is at least 3. The real-action symbol is that it's defined as a function from fb into minus 1, 0 or 1. So fb is the, the v's of integer will be. And the real-action symbol is drawn at 0, which is equal to 0. And that is minus 1 if the e-button is a non-quadratical symbol, modulo p. So if x is equal to 0, it's equal to the square for each z in fb. And that is 1 if the input is a quadratical symbol, modulo p. So it means that it is the y such that x is equal to y square. The real-action symbol can also be defined as a power map where the exponent is b minus 1, 0. Now the real-action symbol has many properties. I just recall a few of them. First of all, if we have x and y which are equal to modulo p, then the real-action symbol of x is equal to the real-action symbol of y. And second and most important for the following, the real-action symbol of the product is equal to the power map of the real-action symbol. Now the first function that we're going to present is this one. We have x input and the function return x to the power of d times alpha plus the real-action symbol of x. It is possible to prove that this function is invertible if these two assumptions are satisfied. So first of all, d is a positive integer which is co-prime with b minus 1.  Just to give an example, if b is equal to 1 modulo 4 we can just fix alpha equal to 0. Now, why this function is invertible? Well, let's say that y is the output of this function. It's easy to know that y is equal to 0 even though if the input is equal to 0. If this is not the case, let's compute the real-action symbol of the output. Now, when you see the properties of the real-action symbol, the real-action symbol of the product is equal to the product of the real-action symbol. Now, b is an integer, so the real-action symbol of x to the power of t is just equal to the real-action symbol of x. Here we have the real-action symbol of alpha plus the real-action symbol of x. If x is equal to x times 0, this quantity is either minus 1 or 1, but we don't care because by assumption the real-action symbol of alpha minus 1 is equal to the real-action symbol of alpha plus 1. Now, we can easily invert this function. So the inverse is given by this expression, where the power map is invertible due to this condition. Okay, so I just say that if alpha is equal to 0, then this permutation is invertible, only in the case in which b is equal to 1, model 4. We can miss this function always invertible by changing the function on e. So this function is seen as before, but now the invertible is guaranteed if this condition is satisfied.  The reason is very simple. Okay, this function is just a power map with this exponent and the e-value of this power map is guaranteed by this condition. Now this function has been proposed for granted, so we are going to study this new formula. At the moment, I just would like to, I like this result that we are proving in the paper. So if p is equal to 1, model 4, then d is always equal to d prime, where d prime is just a positive integer that is co-prime with p minus 1. And this basically follows from this result. If p is equal to 3, model 4, then d is equal to 2 times d prime, where d prime is co-prime with p minus 1. So if p is equal to 1, model 4, then d is always an integer. If p is equal to 3, model 4, then d is always an integer. If you want to guarantee that this function is invertible. Now another function that we propose in the paper is this one. So basically it is a power map, but where the exponent depends on the initial symbol of the e-book. So this function returns 0 if the e-book is equal to 0. It returns x to the power of d plus if the initial symbol of the e-book is equal to 1. And it returns x to the power of d minus if the initial symbol of the e-book is equal to minus 1. This is the algebraic version of this function. And it's very easy to prove that this function is invertible if p plus and d minus are co-prime with p minus 1. The reason it's very simple is that the equation symbol of the e-book is invertible if this equation is not satisfied. Now this function makes sense if p plus is different from d minus. But in such a case, this function can be worth an asymmetric. It can be potentially broken in the section or for the task. And the reason is that depending on the e-book, we are going to compute two different power maps with a different cost. So depending on the cost, we can recover some information about the e-book. Now in the paper we propose other functions that are set up using the initial symbol. So if you are interested, I refer to the paper. We also study the statistical and the algebraic properties of all the functions that we propose in the paper. So I just would like to recall some of these properties for the function that I just proposed. So in this table we have the function that I just mentioned, the condition for the inverted p. Some consideration about the maximum differential for a median, some consideration about the algebraic properties. So let's start with the algebraic properties. The algebraic properties always refer to the polynomial representation of the function. And in all these cases we have that the polynomial representation is first and that the degree of the function is i. It's p minus 1 of plus something. The reason of this is very simple. The initial symbol is a power map. So we can immediately reduce that the polynomial representation is first and the degree is related to the degree of the initial symbol. What about the statistical properties? In this case we have to arise two cases. So let's take this function or any of these three functions and let's fix the differential symbol or let's remove the differential symbol. If the degree of the obtained function is p is 2, then the maximum differential for a median is a constant divided by p. And since p is very large, this means that we have a good maximum differential for a median. If the degree of the obtained function is 1, then the maximum differential for a median is 1 half. And we expect that because for example in this case we have something that is basically linear function. So this is a review for the statistical and the algebraic properties for the function set up in the differential symbol. You guys now consider some permutations set up in the model 2 period. The first one that I'm going to present is very simple, but I think it's very elegant. I think everyone knows that this square map is not a relatively simple model p because x square is equal to minus x to the power of 2. However, we can easily, we can slightly modify this function in order to get something that is invertible. And then it is very simple. If x, if the input is equal to 0, model 2 then we are at x square. If x is equal to 1, model 2 then we are at alpha times x square, where alpha is a number that we consider model p. So the rotation symbol of alpha is equal to minus 1. So the function is x square times alpha to the power of x, model 2. So in this way we get a function that is invertible. Now, I'm going to show why this function is invertible. I think it's quite an interesting example. And in order to do this, we prove that the function is injective. So if f of x is equal to f of y, this implies x is equal to y. Now, we work with a finite phase, so injective implies that the function is injective, so we get invertible. So first of all, we know that the input is equal to 0, even though if the input is equal to 0. So from now on, I assume that the input of this function is different from 0. And now, let's consider this case. Now, let's assume that f of x is equal to alpha times x square, and f of y is equal to y square. So this happens if x is equal to 1, model 2, and y is equal to 0, model 2. But now, this is to assert that this equality narrows, because on the right-hand side we have a square model p, and on the left-hand side we have a number that we consider model p. Remember that alpha is a number that we consider. So this situation can never occur. And this means that if f of x is equal to alpha y, then x model 2 is equal to y model 2. Now, let's denote z, this model, which is either 0 or 1, doesn't make any difference. So f of x is equal to f of y, implies this equality. So alpha to the power of z times x square is equal to alpha to the power of z times y square, which means that x is equal to plus or minus y. But now, if x is equal to 0, model p, model 2, then minus x, which is equal to p minus x, is equal to 1, model 2. Again, this is not possible because this equality implies that x model 2 is equal to 1, model 2. And so this implies that the function is effective and so on. Now, what about the h-by properties of this function? Well, in the paper, we prove that the linear representation of this function is given by this polynomial, where we have this function that is not function, so you can observe that the exponents are just all integer, plus a single monomial of degree 2, where the coefficient of this monomial is 1 plus alpha divided by 2. Now, as you can observe, this function can be potentially dense and could be of maximum degree. So we consider several values of alpha and we try to evaluate the density of this function for these different values of alpha. For example, this is an example for alpha equal to minus 1. So this density is sufficient, this is equal to 0, so we have another function. Here we have several values of p that we test, and here we have the number of monomials. So in blue, we have the expected number of monomials for another function, and in red, the real number, the complete number of monomials of this function. And this, as you can observe, the two lines are very close, and by accident we checked that the function is basically always of maximum degree. So the difficulties of this function are quite nice. But let's analyze this case alpha equal to minus 1 in what it is. So in this case, the function is invertible if p is equal to 3 mod 4, and recently said we need that minus 1 is a non-parallel theory of mod p. So in this case, we have the function minus 1 to the power of x mod 2 times x square. But what I want to emphasize is that in this particular case, we don't have to complete the mod 2 operator. So this function is just minus 1 to the power of x times x square. And this different representation could be easier to compute in some applications. Moreover, if we slightly change this function, we are something that is always invertible. So if you consider the function minus 1 to the power of x square times x, then this function is always invertible. And the reason is very simple. You just take the output of this function, the square of this output is equal to the square of the input, which means that x is equal to minus 1 to the power of y square times y. And again, we can slightly define this function. For example, we can start this function, so minus 1 to the power of x square times x to the power of d, which is invertible if d is 4 prime with 3 minus 1. As before, let us have a quick look about the underlying and statistical properties of this function. In this case, if you consider the energy of the properties, we have that all these three functions are tensed and using a maximum degree. So with respect to the functions that we have here, we have that energy of properties because in this case, the functions are tensed. But I remember that in the last case, the functions were sparse. Regarding the maximum differential probability, we have seen the result before. If we are going to replace the model 2 operator, then if the resulting function is every one, then the maximum differential probability is basically one. If the equation is at least two, then the maximum differential probability is a constant divided by p, where again, this p is very large. So in general, we get those good statistical properties. So we have several permutations over at p, which have good statistical properties and good algebraic properties. So we can see that if we set up as many permutations, we can see that if we want these permutations, we could achieve good security. Over at p is a problem, and if I follow it, the number of possible values of the equation symbol for the model 2 operator is very, very small compared to the size of p. For example, the equation symbol returns just free output minus 1, 0, 1, which basically is just minus 1 and 1 because theorem occurs in it on your equation with theorem. And the model 2 operator is just 0 or 1. So we have to output from there to p possible e, but where on p is very large. So how can we potentially break primitive set up with this function? Well, the idea is to fix all the equation symbol and the model 2 operator. If the algebraic representation of the scheme is low degree, we can potentially try to break this in the algebraic complex. In more details, let's consider a symmetry primitive, which could be a Cypher, a pf, an h function, or whatever. We think it's all possible to change symbol and the model 2 function and we construct a system of equation for such fixed values. In the system of equation, the variable could be, for example, the key for the Cypher, could be the equation for the h function or whatever. If the system of equation is low degree, we can potentially try to solve it via some h product techniques, like for example, optimization, internal basis, or group binding technique. And given the solution, we check if the final solution satisfies the system or the model 2 function that we fix in the first table. If this is the case, then we find the solution of the system. So we find, for example, the key for the equation match, depending on the equation view. If not, we just repeat the present. So that's it, yeah. And let's have a concrete example of this factor and the example that we'd like to write it, that we consider, the variable is pranay. Pranay is a sponge-esh function, which is instantiated via an interactive implementation over FB2DAN, where the function is defined in its way. So we have constant addition. The linear layer is defined as the modification via the NPS matrix. And the FB2DAN is defined as a product between x to the power of d and the initial symbol of the input. The variable at d must be chosen such that this function is a variable. So in this case, we would think of all the initial symbol. We consider the system of equation that creates input of the hash with the output of the hash, and we try to solve this system of equation if the solution satisfies all the initial symbol that we form, our brainage. Now in one particular case, we have an hash value in FB, and we look for our brainage of this form. So x will get related with x prime, where x prime is 6. So the system of equation is actually just one equation in one variable that links the input with the output of the sponge. For solving this equation, we can just use a work-finding approach whose host is proportional to the degree of the equation that we want to solve. And in such a case, the degree of the equation is c to the power of r, where r is the number of rounds, and d is the degree of the defined source. So this is one in the d. So before presenting, our side would like to point out that a single attack strategy has been proposed by a current designer. But there is a difference. In our case, we possibly have a single equation that links the input and the output. So we have a single variable, a single equation, but in general, my brain. In case of the designer, they work over a round level, which means they have many equations, they have many variables, but each one of these equations is really clean. So in such a case, you are forced to use, for example, a generalized approach, which is, as you can see, a more expensive, even if all these equations are loaded equally. So let's have a look at our completed side. So let's consider the planning. The target is the security level of 128 p. And where p is to the power of 256 p. These are different instances of predict. So p is the equivalent of the S-box, for example, 2, 3, 5, and so on. And n is the number of words that compose the state. This is the number of rounds proposed by the designer already with the security matching. And these are the number of rounds that we are able to attack using the attack that we just proposed. And this is our accommodation for the number of rounds with the same security matching proposed by the designer. This number of rounds includes both the attack that we proposed here and some other observation that we made in the data regarding the S-box. So as you can observe, if t and n are large, then we can break quite many more rounds than the ones proposed by the designer. For example, if t is equal to 2 and n is equal to 12, then we can just break one round. But if t is equal to 5 and n is equal to 8, we can break four more rounds by the insurance six. And so here you can see that the remaining number of rounds, in some cases, they have an increment of 100% or even more. Okay, so to summarize, in this paper, we proposed a certain presentation where we applied this with a simple, algebraic expression that has set up the integration of new bold and about the dual operator. Just to point out that these dual operators are not defined by the private feed. So the private feed allows for new idea, new direction of research. So I think it's a really interesting approach. The result of our analysis is shown that, yeah, so we can set up new functions using approach that are not possible over binding, but we should be careful when using such functions because new attacks are also possible. So this is interesting, I think. And then finally, we would like to leave an open problem for future research. So in this paper, we just proposed several lines of notation and because of the security of our theme, we succeeded with this presentation set up with additional symbol or new dual operator. But we actually never considered the efficiency of these functions or of a primitive setup with essentially one of the functions proposed in this paper. So as an open problem, this would be really interesting if such as the medic committee could be combated in multi-part computation or zero-managed applications. That's all from my side. Thank you very much for your attention and I hope to see you in the next.


What's going on you guys welcome to the single guy channel my name is Lloyd now today We're gonna be talking about how to be attractive even if you're nervous guys. Tell me all the time They tell me hey, I walk up to women and I'm nervous How do I get rid of this blah blah blah and you know being nervous is not if you could be confident all the time That would be great, but it's not always feasible Okay, there are gonna be times where you walk up and you're nervous I'm a perfect example of this you guys like I get nervous talking to people all the time Okay, definitely not as much as I used to in fact I'd say probably more often than not I'm not getting nervous But there are times especially you know when I was filming footage for the practical approaching system You know I was walking on the beaches of Santa Monica just talking to random girls And I hadn't gone out in six months to do that so because of quarantine and everything so I was very very nervous So what are some things that I did during that time to still be successful? You know I still ended up getting the tons of phone numbers and I ended up having like eight girls coming back to my hotel That night and two of them were models. How did I end up doing this even though? I was nervous, so I'm gonna tell you exactly how I did this even though I was feeling Experiencing bad emotions how to get over them and how to still be attractive in those environments I'm gonna give you some practical tips and some like kind of like mental stuff that you guys can do to help out with this Okay, so let's get right into the video The first thing that I would say about nervous guys is that nervous guys when they look unattractive It's because they're kind of twitching or they're moving or they're looking down or they don't commit to what they're doing When you're talking to a girl or when you're approaching somebody or when you're doing an activity even if you're nervous I don't care how you're feeling inside do it 100% don't half-ass it just say oh, I'm nervous I'm gonna only kind of wave to her a kind of wave you might as well not have waved at all You go all in or not at all Okay, and women can sense this the hesitation that comes along with it the That kind of thing it really creeps them out that they're not into it at all. It doesn't look attractive Okay, but what does look attractive is a guy showing courage So what I invite you guys to do is not try to make yourself feel the absence of fear is Deal with the fear one of the pillars of being a man is Being courage has been courageous.  All right when I'm nervous. I tell myself, huh? I'm nervous I'm gonna walk up there and see what happens. Okay. I'm okay with the fear I'm okay if she walks away or ignores me I'm okay if I have a bad interaction what I am not okay with is I am not okay with me not taking action Just because I was a little nervous just because I was scared and I know for some of you You kind of get that gripping that that that fear that takes over your body where you're just so nervous Where you can't even make a move Do what you can in those circumstances if I'm in that position I do what I can if I'm too scared to have a conversation with a girl I'll wave if I'm too scared to wave. I'll smile if I'm too scared to smile I'll look up and try and make eye contact do what you can in that period of time and work with what she got Okay Now the other thing that I would recommend as well too is that nervous guys when they hesitate and they move They kind of twitch. Okay, try and reduce the amount of extraneous movements to your character If you're just if you're standing there and you're doing like weird like itching things that don't really make any sense That signs of Not just nervousness, but insecurity. Okay, so if I'm nervous, I just take a deep breath Breathe it out And just be cool for a while. Don't move around a whole lot. If you're hard-speeding you're hard-speeding It's okay part of courage is learning to deal with the fear that you're experiencing but not letting it affect your actions Okay, so if you're a guy who's nervous it does not prevent you from being attractive what prevents you from being attractive is not Exercising the courage women actually think it's kind of cute when a guy gets nervous and talks to them Even though I walk up and like I seem really confident I tell the girls later like yeah, I was super nervous to talk to you. You're really pretty and they're like Oh, it's so sweet. Like you seem so confident. I had no idea It's because I used courage I didn't move around a whole lot when I was talking to them like some guys are twitching I just kind of stay there and concentrate on not moving a whole lot and then when I do move I kind of use my hands, but I keep my feet planted and you know my shoulders relatively Secure so all of that stuff can help But I would say the biggest thing is what I had talked about earlier, which is look dude Sometimes I walk up and I really don't want to do it sometimes. I'm shaking sometimes I'm like I'm feeling actually quite ill and sick before I do something so I concentrate on the things that I can do and I do 100% Not 98 not 99 not 99.5. I do it 100% and By the end of the day there's times where I'm literally just like high-fiving girls bringing them in giving them a little hug And then you can get a if you're in like a festival or if you're in the kind of a crazy environment You can get a quick make-out to like there's a lot of things that you can do I don't do that as much as I used to But you know when I was like in my early 20s. Yeah, I would do that shit all the time and But I would work up to that I would get to the point where I could do that sort of stuff and yeah sure at the beginning I was very very nervous to do it So don't focus on things too far into the distance focus on what you can do now and don't let your nerves and your fear Control what happens to you? I remember there was another time like I'll give you an example about where I had to exercise you know Fear or get over my nerves right right then and there I was at a restaurant and there was a very very pretty girl ahead of me And I was just by myself and I hadn't talked to anyone all day I had been working and I just started and I was like dude You should say something like she's really pretty and I was like starting to get nervous and I was like I don't know like starting ruminating all of these things in my head and I was like alright What can you do right now? Just what can you do anything? Just say hi.  Hey, where are you? Where are you from? Are you from the area? Okay, cool. Nice. I'm from I'm from the area as well, too Right now ask her what she's up to. Are you just ordering or are you just waiting here for somebody? Oh Okay, cool. You're right here or somebody. Yeah, I'm actually waiting to order food I really like this place and then we started to talk okay I did the things that I could do didn't move around a whole lot didn't didn't psych myself out didn't let the fear control me I used courage and yeah, did I look a little nervous at the beginning? Yes, but that's okay What's not okay is letting this fear dictate you in your life and never taking opportunities because you're scared Any opportunity worth taking should involve a little bit of fear any challenge work worth embarking on you should be a little nervous for Anything that's gonna help you improve is gonna be a little bit uncomfortable at the beginning Okay, this is part of life learning to manage this discomfort learning to deal with it will make you successful Not just with women but in life in general and the crazy part is women recognize this And they know that that it's part of the game. And so that's why I think in my opinion Them feeling a little you're you feeling a little nervous a lot of times They'll think is cute and if you do it in the right way as opposed to Half-assing it or hesitating and you embody the the fear and the nervousness and just go out there and be courageous You know, they find it flattering they find it to be a compliment. Okay, so Being nervous isn't the problem. It's not having courage. That's the issue So I invite you to be courageous you guys. All right, cool Well, this is something that I teach guys in my programs all the time So if you're interested to get coached by me personally is a form down below. Thanks a lot y'all