Hello everyone. Thank you for having me here today. My name is Thomas. I'm the CEO and founder of provable provable is blockchain Oracle service that has been operating in the ethereum space since 2015 So during this presentation, I will show you what is the trust model that we are using with our Oracle service and We try to understand what are the trust implications and what's the challenge behind the you know designing of such Oracle services and In the last part I will like introduce a new project based on the same trust model which is called the p tokens and this is basically a two-way peg for Tokens which are native to one blockchain so that we can use them like on ethereum or on other blockchains So let's start with like a brief introduction to understand the like some terms that we will be using a lot during the presentation so the three entities we are interested in are basically The data source which is like a web API or a source for external data that doesn't live on the blockchain Then we have the application which typically will be a smart contract and we have the Oracle Which is this like new intermediary in a world that is trying to get rid of intermediaries, right? So why do we need like an Oracle to reach out to external data? Well, this is because of the way the blockchain works, so it's not possible to reach out To like the internet from within the blockchain So the Oracle somehow enables that we see later how this is possible But the Oracle is basically an actor that operates on the blockchain But he's also capable somehow to reach out outside to the data source So as you see already here The data source is always to be trusted because the data In general it is something inherently trusted like if we have a smart contract that needs to release a payment When you know a given flight is late or if the temperature is reaching some degrees or Like if the number of views of a YouTube video go above a certain limit Then we always have like a third party that is like claiming what the correct Answer to those questions is so one example for the number of like views for a YouTube video is that YouTube is the one telling us how many views the video has and we have no way to independently verify that So we always need to trust YouTube in the same way if we if I was asking you like what's the temperature here today I'm sure I would get different answers But most of you will probably look for the first results on Google and the reality is that we don't know Like the precision that we are looking for as for this data. We don't know the exact location So, you know the data source is always making some assumptions So we need to trust the the data source for the data is providing is like the data We are pushing to the blockchain is always Like a claim coming from the data source. Yeah, sorry So As I said, we have been around for a while. So this enabled us to collect some interesting data The data you can see here. It's quite small, but they will help you to to understand it so Over the last like four years We have processed over one million transactions on the theorem main net asking for external data And if you look on github, there are approximately 1000 github open source smart contracts that are basically using the Oracle service So we have like process this data to understand what those contrasts do what's there like a field And basically what we found out is that of course, there is a lot around, you know, DeFi so Assets and tokens or you know, I see all that needs to check a price feed because maybe they want to fix like the contribution in USD instead but they receive eaters or things like that But there is also a lot around a gambling as you can see here Because the randomness is yet another like piece of data, which is not easy to Compute straight on the blockchain without having like the miners to possibly collude so the the role of the Oracle goes way beyond the Fetching of the data from a web API could be really the offloading to offer computation to an option context But it could be much more as we see later So the model that Provable as adopted is the one of using the basically trusted computing techniques to Prove that the data we are fetching from a web API is indeed authentic And it has not been tampered with during the delivery process So you don't want the Oracle to potentially Like compromise the data. So you're already trusting the data source You shouldn't trust the Oracle as the Oracle could potentially, you know change The data it has received from the data source and just push something different to the blockchain So it may trigger like a wrong payment on the blockchain or it may lead to wrong results So what you want is the Oracle not to be trusted and that's why you need the Like some kind of proofs that the data delivered is correct is is authentic. So Provable has been doing that with trusted computing techniques For those of you who are not familiar around trusted computing the idea is to basically use some like Dedicated chips that provide the sandboxing in hardware for the execution of a given piece of code So basically we publish the code that gets executed on those special machines And we those machines help to to generate are not in this the proof So it's basically Something that along with the result helps to understand that the computation has happened within those safe boundaries We send them to the blockchain and then basically this provides like a shield against the manipulations During the data delivery. So this enables you to verify that the Oracle has sent the answer But it's not the like owner of the data and the owner of the data is really the website So there has been no alteration during the process. This is why they are called like authenticity bruce There are many like challenges around oracles. It's not just around it, you know proving the authenticity of data Which has been our main Like focus for the last years. There are many more challenges. So as you can see here One is around, you know, relying on reliable data sources. We don't want to you know, push data to the blockchain in a way which is Secure and then have low quality data sources that cannot really be trusted. So this is something where well Players like Thomson Reuters, but also streamer and few others are working a lot so that they can basically provide some guarantees on the selected data sources and they can provide quality data to to the blockchain And the way to basically not rely on a single Trustline on the data source front is to basically use more than one data source So in the case of the price of eater for instance, it's quite simple because you can just you know, do an average on All the exchanges that have the majority of the trading volumes So you have something accurate which doesn't have like points of failure theory But it depends it can get much harder depending on the data you want As I said for with the example of the number of views for a YouTube video You have no possibility to go, you know to avoid the trust line with Google because it's just something which inherently belongs To to YouTube, right? So YouTube is somehow the only data source you You you will need to reach out to Then as for the like authenticity of the data We have been using few technologies such as like the trusted execution environment of Qualcomm The ledger none us the some of you some of you may be familiar with any tell SGX So this is something that's also Chaining with the town cryer project has been working on There are a few options on that front But using trusted computing is quite general purpose So it can help to basically provide those guarantees for the execution of something on the off-chain context while interacting with the on-chain context Also, there is a lot of work going on on the protocol that those oracles should use while speaking with the blockchain So chain link, but also make it down compound the rhombus and others also with net They are working on on that front We have been doing so for few years as well And I think those systems will end up to Interoperate one with the other and depending on like the needs of the smart contract There will be the adoption or of one system over the other So for example as you will see in a second the provable one is optimized for being a cost effective on chain So the gas cost is very low and it doesn't give strong guarantees on the fact that the an answer will be provided But it provides guarantees on the fact that when an answer is sent to the blockchain. It's really authentic So, you know that basically if you get an answer the answer is secure while other systems focus also on like Giving some more guarantees around the redundancy so that basically you can potentially have Also a guarantee that the result will be sent So that's why for instance, we are looking to integrate with other systems here So if someone is interested to pay a premium because maybe they want more redundancy then they can go via other oracle systems And still benefit from our authenticity pros so over the years what we have Like heard from the community as for the community feedback is basically that this is what they were looking for like reduced cost because many times you have like a Transaction on Ethereum that needs to reach out to external data and you don't really want this external data fetching to Like increase significantly the cost of your transaction You're already paying like the gas price for confirming transaction You don't want the oracle to impact significantly on that cost So this is why having a fully decentralized approach is typically more expensive and for some applications it may be Like it may not be a good fit So it depends on the application if you have an application where for instance you want to like get external data for every Transaction doing it in a fully decentralized way may be where we're more expensive So it depends like for gambling for instance I don't think that Decentralization provides really a strong benefit on the random number generation part while for other things like price fits You may want like to get data every few minutes instead that then every transaction So you may want to obtain in a more like a decentralized approach and pay a premium for that Also, the other things you see here like data security So the authenticity process approach and more they are all like a critical components that are needed because you don't want to compromise the security of your smart contract again and Also reputation systems, of course are something that is often mentioned and that somehow is Part of those oracle systems that are being implemented and well these of use as well because you really want to you know You don't want the oracle components to complicate too much the way your application is a structure so Basically the technologies as I said that we work with our basically We're blockchain in general because we don't integrate just with Ethereum we have integrations with a few blockages, but Ethereum is the one with most of the traction and Trusted execution environments. So trusted computing techniques of different kinds So At the moment we have approximately 200 projects that are reaching out to provable every month from their smart contracts to to get real-world data and as I said most of them are Around like the generation of random numbers price feeds or like a variety of web API calls that connect some advanced like off-chain Computations typically with the on-chain smart contracts that may just you know, it is a payment So Oracle is is currently integrated with Ethereum mainnet, but also with many test nets basically all the main Ethereum test nets and also with Like other oracles network and with some sidechains So we have focused a lot in the last few years on the random number generation use case because it's actually a Strong need and it has been one of the first applications getting some traction in the Ethereum space and before also Bitcoin space if you think of Satoshi dies, which was like the first application on Bitcoin death caused like a spike in the transaction volumes in 2012 So the technology we have used to like provide the provable random number generator Which is a part of the Oracle are the ones you see mentioned here So it's quite interesting the use of the ledger TE because most of us know the ledger Nanos as the you know hardware wallet to secure you know, if or other tokens But the reality is that the security guarantees provided by the ledger Nanos could be used for custom applications And you can really implement anything within the safe boundaries of the ledger Nanos While proving to third parties that you know the application was really running on a ledger Nanos with no iterations So this is what we are using for the random number generator for instance These are the networks. I was mentioning where we are integrated as you see We also have like other ethereum based networks such as RSK But also other networks, which are not ethereum based EVM based such as US art record the fabric and others So Everyone is Discussing this year about DeFi, which is really a new term for something that you know We have always discussed which is the potential of decentralized financial applications in this space So I found that tweet a few months ago quite interesting as it's basically showing as we have seen in other presentations as well that like the composability of those DeFi Tools is somehow leading to many interesting use cases and everyone is building on top of other components that are built by other teams so Thinking about that. I I think we could really split the needs of DeFi in two categories So the first one is the engine, which is like the platform where you want to run the DeFi Tool and at the moment it's mostly ethereum, right? So we have something that are like on eos, but it's still quite limited Why because on eos you don't really have other you know the rest of the ecosystem is sort of missing So ethereum got a lot of traction for different reasons for the technology But I would say that one of the main points in favor of ethereum today is the huge Like developers base and the user base and the fact that we already have some initial traction differently than other blockchains So this is probably one of the main reasons why DeFi is being built there and why there are so many new tools that are being built there So interoperability of blockchain and composability of those DeFi tools are helping to like grow significantly The relevance of DeFi in general So the first thing you need is like the engine as I said which today is ethereum And that's fine as there doesn't seem to be like requests from the users to to move it as well So that's that's where we are building And then you need assets, right? This is what's also listed in the tweet But we have been seeing like tokens of all kinds that you know our interest bearing or that have other properties Think of like Vrap the Bitcoin is one example of that where you have a federation Securing basically a near C20 token on ethereum, which is collateralized by Bitcoin and Yeah The point is do we really believe that like all those DeFi tools will never have any need outside of ethereum Well, I guess the answer is already there with WBTC, right? We see there is a first need for like Going beyond the limits of the platform where the DeFi tools are operating which is ethereum So we have if you look on coin market cap the like tools being the assets being traded that have most of the Volumes and also the liquidity are not just ethereum based So some of them are ethereum based but you have many others that are not ethereum based Not to talk about the you know non blockchain assets So there is a strong need to go beyond that So that's why we started to work on this new project called the P tokens This is based on the provable infrastructure and provable technology P stands for a few things It stands for provable But it's also stands for portable tokens and also for packed tokens Because what they are is really just a two-way pack with tokens from that leave natively on a different blockchain than ethereum But the P tokens are their representation on it or on ethereum So it's basically the the same thing you may have already tested out with WBTC But it goes beyond that because it could either be like in support of a federation so it could be something used on top of WBTC or It's something you can use to potentially like replicate WBTC without the federation or Start other tokens without bootstrapping a new federation again and again so I Believe this is like quite significant for the impact it could have on DeFi So I want to explain you how it works. The the trust assumption is the same one. We had built the provable Oracle service on so it uses trusted computing to secure the packing and It can be integrated with like any blockchain really for the way it works. So it's very general purpose So let me show you what's the What's the flow. So this is like a general representation of the ethereum blockchain on the right and on the left You have a blockchain, which is known ethereum based. So it's like The the first one we will release is EOS as it didn't exist on ethereum So it will be like a P EOS token on ethereum But it this this applies really to any blockchain so it could be Bitcoin It could be you know rape or whatever Whatever there is a need for in the DeFi ecosystem on on ethereum So you have the trusted execution environment in the middle, which is the secure sandbox executed on Intel as checks in this case and basically what the what the What happens is that the secure enclave at the moment is running within like those boxes that we had as part of our Infrastructure, but it could be run anywhere. So you can run it on your own like Intel SGX machine It could be running the cloud with some Intel SGX Enabled the machines or you can just use one of those machines as well if like You want to potentially secure this two-way peg and contribute to the redundancy of it so It doesn't it needs to be limited to Intel SGX the concept goes beyond SGX itself But the first implementation will be on SGX as it's the like easier the easiest to get started with and the code is quite complex at the moment the Code is open source. So basically anyone will be able to To verify the code and know that the two-way peg is actually secure and it's running as intended So it gives full transparency Which is not reputation based. So that's why you don't you don't necessarily need a federation You can potentially use it without a federation or in support of a federation to minimize the trust in the players involved so we in the PEOS Use case that's what happens with the issuance of new PEOS tokens. So you basically send like an EOS transaction to a specific address which is probably under the control of the Enclave of the trusted execution environment and then you send to the trusted execution environment approve of that Like a proof of the deposit. So the enclave will be able to verify that this deposit happened correctly and will authorize on Ethereum a Transaction where that basically issues the new PEOS tokens So the opposite happens when you want to like burn the token and redeem the PEOS token So the PEOS token can like freely Be exchanged on Ethereum as any ESC-20 token and at any time in an automated way with no manual intervention It can just be redeemed for the underlying asset which in this case is EOS So what you will do is basically burning the EOS the PEOS token and when you burn it you specify the EOS address that where you want to redeem the EOS tokens on and What happens is that basically after the trusted execution environment has verified that everything is Correct, it will release the EOS tokens accordingly. So there is no possibility to steal funds it's fully transparent and secure thanks to the trusted computing component and Yeah, so We have a demo working We plan to release the production version of the PEOS token by end of month But now we are looking for community feedback And we are discussing with DeFi tools to see if they are interested and what tokens they would like to to have on Ethereum so if you are interested to potentially have like on Ethereum a Token which is not there at the moment Please reach out and we will be happy to to support you So this is the DAAP that you will be connecting to this is already actually everything is already working We are finalizing the enclave component at the moment, but the blockchain component is already finalized so what you have in the DAAP is Well just a transparent Look out to like the minting events and burning events so you can check that you know the PEOS tokens and the underlying EOS tokens do match And then you will see the state of the enclave So this is the trusted computing you will see the last EOS and the last Ethereum block that is that are known to the enclave And there are some statistics here on like the operations that has been done by the enclave and that are reported by it You can also like issue and redeem via the DAAP the tokens independently at any time with no intervention So that's much faster than any alternative solution like WBTC or in general Since there is no human intervention for the minting or anything like that It can be really done very quickly. So in the case of like Bitcoin for example, you would just need to wait for the confirmation time So this is a recap. So basically We have worked a lot recently on securing like the the Oracle service, which is already like Stable and use the a lot on the Ethereum magnet We have also released the like new certifications for regulated casinos around the provable RNG But our recent area of focus has become the P tokens Which we believe will use the same technology while providing like a service Which is strongly needed today in the DeFi ecosystem. So if you are interested Well, sorry, this was like P tokens.io is a website where you can go and there is like a white paper There is the draft of a white paper that we have released today And there is a telegram channel where you can join the discussion if you are interested on the topic So it's P tokens.io Thank you for your attention. Thanks


The Nigerian Medical Association supports strike by resident doctors and gives the federal government 21 days to resolve issues. The Secretary General of the NMA will be talking to us this morning. And confusion over electricity tariffs as a core distribution company retracts circular notifying consumers of an increase will take a look at the tariffs, grid collapse and the power supply. We'll also look at the papers this morning and of course a review of some of the major stories making headlines across Nigeria today. You don't want to miss it. With that we say good morning and welcome to another week and a Monday morning here on the breakfast on Plus TV Africa. I am Osaugi Ogboma. We hope that we have a very interesting week ahead of us. Good morning once again. We always will start with the top trending stories and share with you some of the biggest stories across Nigeria from the weekend and till this morning. And I'll start with a really sad one and that is the death reported killing of a son of a seven senator is the Senate Majority Leader Bala Ibn Na'ala. His son Captain Ibn Na'ala was killed over the weekend in Kaduna state. There's a lot of controversy concerning this, you know, because first of all it's common just a few days after the attack on the Nigerian Defense Academy. And so there have been lots of worries from Northern Nigeria and from Kaduna state. We hope that we'll be able to speak with some other one who is Commissioner for Security and Home Affairs sometime during the week to share his thoughts on what exactly the situation is. But it's another very, very sad incident not just because of the personality and you know the fact that is a son of a senator but you know the fact that it seems to be getting worse from reports he was killed in his home by bandits. Last week I had you know a quick thought on what exactly we need to do and what Nigerian and the Nigerian government needs to do to share some clarity on exactly what we are dealing with, who are the bandits and you know how did they merge, what exactly you know are they fighting for, are these just mere criminals because you know when you hear of killings them across Nigeria and you don't hear that anything has been stolen or anybody has been robbed it feels weird calling them just bandits. So are these the same people with the Boko Haram sect, are these an entirely you know different you know group of armed you know criminals or militia who exactly are they, it's pretty much the same thing when we talk about unknown gunmen, how you know is it that for more than a year now we've been hearing about unknown gunmen and we still have no idea who unknown gunmen are, they have not the Nigerian government has not been able to unmask any of these elements and pretty much the same thing with just you know given a group of criminals the name bandits who exactly are they, I've also seen a couple of comments on the social media platforms saying very very very sad comments you know but they basically saying well you know now that it's getting close to home the Nigerian government may act which I don't agree with I believe that every single Nigerian life should be valued and should be protected and not no death should be should be spoken about in a way like that so it's a really really sad story and we hope that there is some clarity we hope that these people will be apprehended as of course the Nigerian government and the state security services would always promise that whoever it is that carried out these atrocities will be apprehended and will be made to face the full wrath of the law we've heard that so many many many times but we still don't see as Nigerians don't see a lot of these things actually happening and that is these bandits or these criminals these militants facing the full wrath of the law pretty much the same thing was said when the Nigerian Defense Academy was attacked and we lost three Nigerian army officers the government said pretty much the same thing that these people will be apprehended and will be made to face the the law but it's days after there's still no news about these people being apprehended we still do not know exactly what Nigeria's security situation is and what must be done where is the honesty and it's one thing that I've mentioned a couple of times where's the honesty we're dealing with these issues and if we cannot have some level of honesty with why these things are difficult to address why it is difficult to find the people who are sponsoring these bandits why it's difficult to you know close our borders you know and ensure that there's less weapons proliferation across Nigeria because these are some of the answers how the weapons get to these people those weapons aren't locally made they're not made here in Nigeria how do they get to the hands of these you know these criminals who are the people sponsoring these these criminals how have we gone almost a decade more than a decade actually and Nigeria still is not able to point out 10, 5, 2, 1 person who has been arrested for financially supporting these terrorists and these bandits makes you know very very little sense but once again rest in peace to Captain Bin Nala and we hope that the family will be able to get over this period also let's move to Kano State where the Kano Hisba has gotten you know some criticism for putting out a statement over the weekend as to why they treat the rich and the poor different the representative was speaking over the weekend and gave reasons for the you know well gave reasons why the Kano Hisba doesn't you know carry out the same treatment that they give to the poor on the rich and this is coming off a couple of events that have taken place in the last few weeks where some of the things that the Kano Hisba has openly spoken about and has criticized others for and has sent people to Sharia court for have been ignored but it's the same reason you know that these people carry out you know caught people's hair in you know in public you know ban the sale of alcohol destroy some business places and give some really really shocking laws that must be followed by people in Kano State and in parts of the country that there is the Sharia law the Kano Hisba said that they treat the rich and the poor different because it is part of Sharia and Islam not to criticize leaders well that might make sense to him and to the Kano Hisba for putting a statement like that because they had to say something but some of all these things still don't make a lot of sense to Nigerians and it still sounds very hypocritical one of the challenges that I have with that is that it means that the interpretation or their interpretation of Islam and the Sharia law doesn't include holding leaders accountable for very very many years now people have pointed out the fact that you know the northern part of Nigeria seems to have the worst with regards infrastructure development education health care you know the benefits of you know being in a democracy and having a government they seem to have the worst of it but there still isn't a loud voice from that part of the country demanding better governance there's still I mean look at the amount of IDPs look at the amount of our Magyri kids out of school children it's the largest number across the country they've also suffered the the worst with regards insecurity but there still isn't a large voice from that part of the country asking for better governance asking for better government actually for more responsibility from their government at every level from the look at look out to the state of the federal there still isn't and when it's time to vote you still see a large number of these people tripping out to vote simply based on religion and from what the Kano Hisba has said it means that there will not be any criticism for government simply because that's what their interpretation of Sharia or Islam you know tells so when you are you know a part of that you know area in Nigeria you should not criticize government neither should you be able to criticize your leaders because what they are saying is oh you know Islam tells us to not criticize our leaders and that's the reason we would rather you know cut off the hair of a poor man in the streets than do the same thing to a rich man's child because not every single person is a leader not every rich influential person in the north is a leader it might just be rich businessmen and you see them and their kids being able to dress freely in northern Nigeria but the less influential poor cannot you know have the same privileges and so that's really what it means and also the fact that religion is a tool of control in many many parts of the world and the reason I say this is the people from northern Nigeria when they read a statement like this will not be able to spot the hypocrisy with that statement because they would simply understand that well that's what their well that you know the interpretation of Islam and Sharia law teaches and so they would basically just fall in line with that statement instead of pointing out the hypocrisy with the actions of the Kano Hisba and so it gives them less you know less of a voice to point out that hypocrisy and it will simply fall in line because once it has been coated or sugar coated with religious coverings then there's really no voice that can be heard well that's it you know with regards Kano Hisba and their statements we also would point you know and celebrate this morning Bosse Ola Omolyo I almost forgot her name and congratulations to her she's one of Nigeria's Paralympic athletes who has just won gold at the Tokyo Paralympic Games by lifting 141 kilograms weight she came first next of course was a Paralympic athlete from Ukraine Natalia Olink from Ukraine who lifted 133 and Bronze was by Vera Morofava a Russian Federation athlete with 132 kilograms lifting so congratulations to Bosse she is of course one of the people who has made Nigeria proud over the weekend last week we spoke about supporting the Paralympians as much as we possibly can they should be given as much support financially and media-wise they should be spoken about they should be celebrated they should be brought back home as heroes and we shouldn't always remember them only when it's time for the Paralympic Games these are people who have done Nigeria exceptionally well and one thing that I said is what is the thing about the Paralympians what is the the reason they have continued to break these boundaries and win these medals that is different from the other athletes is it the training is different are they getting better support you know with equipment and with training or do they just have a totally different space compared to other athletes Nigerian athletes at the Olympics and any other games that's something that you'd I hope that we would understand but most importantly we must celebrate people like her we must celebrate every other Paralympian who was done Nigeria proud one you know gold silver or bronze and they should be you know brought back to Nigeria and given a red-capped treatment because that's exactly what we should do finally also in sports we're going to move to talking about Arsenal and Manchester City over the weekend it was a complete whitewashing of the Arsenal Football Club Manchester City won that game five goals to Neil but that's not what our top trending is I hope that we can quickly play a short clip for you where the Arsenal fans sang a song you know or where you know given a chant at the stadium saying you're nothing special we lose every weekend hilarious and one thing I think everyone should do go on YouTube all right look out for fan chants in stadiums you see some of the most hilarious lines that they chant some of the most some of them you know might be a little racist every now and then but the most hilarious chance in stadium is what you get to see in the EPL all right so let's quickly share that clip with you and I'll come back to talk about it even if I enjoy laughing at Arsenal this is on a totally different level of hilarious you know and it really just tells the mood of Arsenal fans who have completely given up on the club you know don't care about Miquela Teta or any of his you know his policies you know I saw a lot of people complaining over the weekend about how he needs to be sacked there's no way that he can win anything or he can go far this season with the team that he has or with that coach and it makes you kind of feel bad for Arsenal but I would find any reason to laugh at Arsenal and this is one very very special reason I've saved that video on my phone and I'll play it all through the week we lose every week you're nothing special we lose every week welcome to the breakfast once again stay with us we'll take a short break when we come back tunday call our late we'll be joining us for off the press here on the breakfast good morning


So, I'm Judith Warner, Neurolophthalmology at the Moran Ice Center, University of Utah. I'm Neurology-trained Neurolophthalmologist. And so the first thing we're going to do is check your vision. And I know that this has been shown in a variety of ways, but this is how we do it in Neurolophthalmology. So if you hold that and cover up your left eye so you're looking just out of your right eye and read the lowest line that you could read. And the top line is V-L-N-E. Anything on the next line? D-A-O-F. And the next line down? E-G-N-D-H. And the next one? F-Z-B-D-E. Excellent. All right, how about the top line now? O-F-L-C-T. Okay, anything on the next line? A-P-E-O-T-F. Great. Can you make anything out on the last line there or the second, the next line down now? T-Z-V-E-C-L. Excellent, well that's 2020. Yeah. That's better than it seemed to start. All right, then you switch around to the other eye. And can you read that same line? O-F-L-C-T. And the next? A-P-E-O-T-F. And the next one down? T-Z-V-E-C-L. Okay, and then you can actually switch it to reading numbers, which some people with aphasia can read numbers but not letters. And if people are having a lot of trouble with reading, you can also just move to a single letter. And a lot of people who are having trouble concentrating or even who just have amblyopia, people have small areas of field of vision or scatomata can see single letters and single numbers better. So can you read that? Nine. And we can just kind of move it down. Six. And the next one down? Nine. And the next one down? Five. Fantastic, 2015. Great, well done. So when we're checking as people's central vision, one of the other things we want to do is check an amza grid. And so this is an amza grid and we look at it in each eye individually. So I want you to hold that up again and look at the dot in the middle. And while you're looking at that dot in the center, see if you can see the whole grid. Is there anything missing or wavy or distorted? No. No? And normally we would do this, of course, with the near correction. Why don't you switch around to the other eye? Same thing here while you're looking at the dot. Anything missing, wavy, distorted? No. It's all good? Absolutely wonderful. All right, so the next thing we move to is color vision testing. Some people use the Ishiihara color plate. Some people use the HRR color plate. There are a variety of other ones. I happen to prefer the Ishiihara's. You stick with what you're trained with. So why don't you hold that up again so you're looking with your right eye. The first plate is a control plate. It does not actually require color vision. And as you can see, it's really, really large. So people with even extremely impaired vision, 2,100, 2,400 even, can see this gigantic number. So you just read through them. 12, 8, 29, 5, 3, 15, 74, 6, 45, 5, 7, 16, 17, 18. OK. And those are the plates there we use routinely for checking for optic nerve dysfunction. Of course, we would normally check the other eye. It is important, if a technician is doing it, that they note that the patient can see the control, even if they can't see any of the other plates, or if they can't see the control. If somebody's got really good vision, they can't see the control plate, that might tell us something about how they're seeing. The other thing is they might be able to see all of the plates in both eyes, but they might really struggle in one eye and do pretty well in the other eye. And that is something that needs to be documented as well. This set of plates can be used for checking what kind of color vision deficit somebody has if it's a protan-dutan. So once you check the color vision, we routinely check stereopsis again. And so for that, you need these special glasses that are polarized lenses. They can be used for other interesting purposes as well. So this one here, you ask the patient whether or not they can see the fly is looking three-dimensional. And I ask you to, can you pinch the wing of the fly? That's a classic answer. Then there's a little more detailed testing. That's gross stereopsis. This is a little more detailed. I usually do the animals first. In each row, there's one animal that's sticking up off the page. Can you point to or tell me which one? Excellent. Fast and accurate. Very good. OK, now in each set of four circles, there's one that's sticking up off the page. I want you to tell me or point to each one, and you can hold it yourself. The last one's really hard. Give it a whirl. Excellent. Very well done. I think that one of the things that I like to see is that somebody who's really trying is they're doing this movement of the plates, because that's what somebody who has depth perception does when they're trying to see three dimensions. May I have the glasses back? All righty. Now I'm going to check your pupils.  I want you to just look right straight ahead. So the first thing I do when I'm checking some of these pupils is look at their pupils in the room light, and I'm illuminating from below just so that I can see the pupils really nicely. Now we're going to turn the lights off, and I want you to keep looking right straight ahead, and we can look at both of the pupils, again, illuminating from below so that we can see the pupils, but not actually putting light in them. So then I shine the light in both eyes at the same time, and then take away the light from both eyes at the same time. And what I'm looking here for is a nice brisk reaction to the light, and a nice brisk reaction to the dark. Both pupils actively dilate in the dark. Light and dark. Now I'm going to do the swinging flashlight sign, where I'm going to shine the light in one eye, and then the other, one eye, and the other. And I'm looking for the pupil to dilate when I'm going from one eye to the other. The other thing I'm going to check is at near. I want you to look right at my light here, and see how nicely her pupils constrict, and look in the distance again, and up close. Excellent. And in the distance again. Very nice. The next thing I'm going to do is confrontation visual fields. There are many, many ways of checking the visual fields. Confrontation fields are nice, because you have all the equipment right here.   And then I want you to look right at my nose. And while you're looking at my nose, tell me how many fingers I'm holding. Two, one, one, two. Total. Three, four. Good job. And then we do the other eye. Switch around, OK? How many fingers am I holding up? Two, one, one, two, three, two, three. Very good. Thought I was going to fool you. All righty. The other thing you can do is you can check for red desaturation. So you can check for red desaturation between the two eyes, holding up a nice bright red object. A lot of people use the top of the dilating drops. I want you to look right at this red. And I want you to tell me if it looks the same in both eyes. Looking right at it. It looks the same with this eye. And the same with this eye. Look right at it. Look the same? Look the same? Same? And if the patient says it looks different between the two eyes, try and get them to describe it. And if they can, quantify the difference. And they may say that the red is half as bright. 50% is bright. And that's something you can actually are documenting optic nerve dysfunction over time.  It's a little more subtle. It can be very handy for picking up pituitary tumors. So again, cover one eye and look right here at my nose. And tell me why you're looking at my nose.  Look the same as each other? They look the same as each other? Look the same as each other? Excellent. Switch around to the other eye? Same thing. Look the same as each other? Same? And same? Excellent. Nicely done. Now we're going to check some of the other cranial nerves. We've already checked two through visual acuity and color vision. We've checked three, four, and six by checking eye movements. The next thing we're going to do is check seven by checking facial movement. So what you want to do is ask the patient to give a nice big smile. Show me all your teeth. Now relax. Raise up your eyebrows and relax. And squeeze your eyes really, really tight shut. And for this, you can actually see if you can open the patient's eyes. If you've ever tried to put drops in a kid's eyes, you know that you can't open somebody's eyes if they don't want you to. You can see this with request movement, but also just observe as a patient is sitting in front of you. You want to look at blink speed for very subtle facial weakness. Somebody with a subtle facial nerve palsy can have a slower blink on one side or the other, even if they don't have inability to close the eyes. The other thing you're going to check is the trigeminal nerve. Trigeminal nerve does facial sensation and also the muscle domestication. So when you're going to check facial sensation, you're going to use a little teeny cotton swab to check corneal sensation. That checks the reflex arc not only of the cornea, but also of the facial nerve itself with the blink. So what you do is you warn the patient what's going to be happening.  And you can do the same thing on the other side, tiny little blink, very good. And you can see that you had a nice blink response in both sides. Then now I've got this little cotton swab ready to go and I can tickle on the forehead, tickle on the cheek and tickle on the jaw. Those are the three different divisions of the trigeminal nerve. The next thing you can do is you can break your little cotton swab and create a little scratchy device and you can check more of a pinprick type of sensation with a scratch and you ask the patient, do you feel that all over? Does it feel the same all over? The other thing you can do with the trigeminal nerve is a muscle domestication.  I don't ever try to do mouth closure because that would be foolhardy. There's not that much role for the tuning fork, for facial sensation, but it is nice and cold. So we use it to check the sensation of cold in all three divisions of the trigeminal nerve. Is it the same all over? Yes. Very good. And if you're suspecting that there could be some sort of factitious sensation loss, you can actually check vibration sensation on each side of the forehead. And the patient says that they can feel the vibration on one side but not the other that may raise some suspicion. You can also check for hyperactivity of some of the reflexes of the face. You can check the jaw jerk.   So you've checked five and seven. You can check hearing by rubbing your fingers on either side and asking the patient if they can hear it and if it's the same. You can also do vestibular testing and there's a variety of ways of checking this. Already you've done your eye movement exam and you've looked for nice stagnants which often indicates a vestibular problem. But one of the things that's very helpful is the head thrust. So when you're looking at the head thrust, what you wanna do is ask the patient to look right at your nose and then you gently grab the patient's head and move it a little bit from side to side like this. And you ask the patient to keep looking right at your nose.  But you keep looking right at my nose. Just like that. And one more time. Just like that. And the patient's eyes should be able to remain exactly on your nose with the vestibular ocular reflex. Hers was perfect, of course. And the other thing you can do when you're looking for vestibular problems is look at vestibular ocular reflex suppression. And so for that, it's a little bit more of an active job.  Keep your head pointed straight ahead and then I can move your chair around while you keep looking right at your thumb. So I want you to look right at your thumb and here we go. Keep looking right at it and you can give it a nice little vigorous push and she's able to maintain fixation on her thumb at all times. So you can relax. So the next part of the testing would be your gag reflex which tests nine and 10.  So the first thing you can do is you can see that her palate is elevating symmetrically. And then if you have a tongue depressor, you can actually create a gag. I'm not sure that that's absolutely necessary if somebody doesn't have specific sensation loss in their throat or if they haven't been having trouble swallowing or if they're not actually having elevation of their palate appropriately.  There you go. Just like that and over here and then shrug your shoulders up and then H hypoglossal stick your tongue all the way out and you can ask the person to put your tongue back in. Now put your tongue in your cheek here and good and over here. Excellent. And even just looking at the tongue often if there's trouble with hypoglossal nerve you can see atrophy of the tongue. The next thing I'm going to do is the fundus examination which you can do with a handheld direct ophthalmoscope which is falling somewhat out of favor but is hugely helpful for almost all incidents. So what you want to do is get everything set up so that you can do this as comfortably as possible. So what you're going to ask the patient to do is look right straight ahead off of the distance. If they're focused up close their pupil will get smaller and that's not what you need. You choose a smallish for an undeadly pupil you want to choose a smallish light, not too bright. And then it's all about feedback, sensory feedback. So you're going to be having very poor vision for what's going on around you when this is happening so you need to be able to know where the patient is relative to you because in essence you're looking through a little keyhole and if you've ever looked through a keyhole which I know nobody ever does but if you did look through a keyhole you'd know that you have to get right up close. The closer you are to the keyhole the better you can see through it. And she's got pretty small pupils so we're going to need to really get ourselves coordinated to be able to see here. So once you look right straight ahead then you get yourself set so you can see the red reflex and you can see my little pinkies out here because I want to be able to stop myself before I actually bash foreheads with her. So here we go, we're going to come forward. I am looking at the red reflex coming forward, coming forward. I just touch her cheek with my finger here and I'm right on the optic nerve and I can see beautiful venous pulsations and a nice healthy looking optic nerve and I can pop over here and just take a quick look at her phobia. Then you want to do it on the other side.  Again, looking right straight ahead and then come in and right in there on her optic nerve and she's the world's most cooperative patient so it works really well. We've covered the remainder of the cranial nerves two through 12. You could check one if you wanted to if you're concerned about a orbital frontal meningioma for instance and somebody who's got foster Kennedy syndrome. You can check somebody's sensation of smell with coffee, try not to use alcohol swabs because they are doing more checking nasal pain rather than smell. So we have checked the remainder of the cranial nerves two through 12 and we've done the funds examination. I hope that you have found this helpful.


Some competitors just have that look, which will guarantee them massive success in the wrestling business. And there's no better example than Lex Luger. During his heyday, the total package, headlined more pay-per-view shows, sold more tickets, and appeared on more magazine covers than all but a select few superstars of his era. He was also chosen to be THE guy to carry the two wrestling companies he represented. Another accomplishment that only a handful of wrestlers can stake a claim to. Musically speaking, Lex's entrances consisted mainly of chiseled hard rock bangers that fit his style and appearance better than a pair of Rue's shoes. This documentary will chronicle Luger's wrestling career and also take a special look at the music that made the man. From stars and stripes forever to slammer, let's take a look behind the themes of Lex Luger. Possessing a sculpted body that was juiced to the tits thanks in part to Dr. Feelgood, Lex knew that he had better used what his mama gave him before it was too late. After a failed college football career that saw Luger kicked off the Miami Hurricanes when he took a little walk on the wild side and caused a hotel ruckus, he tried his luck in the pros of Canada, playing close to his home sweet home of Buffalo, New York for the CFL's Montreal Allouettes. Lex spent a couple of years there before returning to the States when he signed with the Green Bay Packers of the National Football League. However, Luger never played in a game and thus is not listed on the Pack's all-time roster. In 1984, Luger finished up his football career playing in the United States Football League for the Tampa Bay Bandits, Memphis Showboats, and the Jacksonville Bulls. So seeking some stability in his life, Lex walked into the Tampa offices of Championship Wrestling from Florida, where he was introduced to legendary Japanese wrestling trainer and breaker of legs, Hero Matsuda. Matsuda mentored some true icons of the business, like Hulk Hogan, Mr. Wonderful Paul Arndorf, and Ron Simmons, and allegedly wouldn't let wrestlers train with him unless they did 1,000 push-ups and 1,000 squats. This, of course, was no sweat for the total package, and Hero agreed to help kickstart Lex's career by becoming his trainer and mentor, and Luger would soon make his debut with this motley-crewed masher as his entrance theme. Breaking into the business when wrestling was enjoying one of its biggest booms ever meant that promoters were constantly on the lookout for the next big thing. In the mid-1980s, many promoters equated big muscles with big potential success, pointing to the superhero-like stature of wrestlers like Hulk Hogan, Superstar Billy Graham, and the road warriors Hawk and Animal. Boasting a phenomenal physique, Luger fit that mold better than a tight t-shirt, but it wasn't long before people began referring to him as the next Hulkster Brother. Bursting onto the wrestling scene like no other before him in the Florida Territory, Luger quickly became number one with a bullet, a modern-day Superman, so to speak, which is ironic since Luger's adopted ring name was inspired by the man of steel's nemesis, Lex Luthor. Luger's rapid rise saw him win the prestigious pro-wrestling-illustrated Rookie of the Year award in 1986, and that meant that ultimately his star power burned brighter than the CWF. And just in case the prospect of leaving the territory wasn't tempting enough already, an infamous solid steel cage match with a wild and crazy bruiser Brody helped Lex decide to high-tail it out of there faster than a speeding bullet. During the match, Brody just stopped working, stopped selling, stopped doing anything, leaving Luger confused, terrified, and wanting out in the worst way. The workers there couldn't get the cage door open, so Luger leapt out of there like he was leaping a tall building in a single bound. The next stop on the Lex Express was when Luger was brought into Jim Crockett Promotions in 1987. Thrust into the spotlight, everyone quickly learned that sexy Lexi was indeed the total package, and aligning Luger with the legendary four-horseman as a replacement for that crusty old bastard, Ole Anderson gave Lex instant credibility. Luger's look and his strength added another element to the heel faction that they had never had before, a big muscle dude. And with announcer David Crockett as giddy as a schoolgirl whenever Lex began to flex, the NWA fans soon started to cheer him on, which led to Luger leaving the faction for a babyface singles run chasing Flare and the big gold belt. But unfortunately for the total package, big gold proved to be as elusive as his first NWA entrance theme, which has evaded the wrestling theme song community for decades. It's obviously from a production music library of some sort, but no one has been able to locate the title of this track or the name of its composer ever. Now for reference, this audio was recorded from a VHS tape of the 1988 Great American Bash that I bought for the low low price of $30. That was the price of freedom back then, folks. And no, I will not be explaining what a VHS tape is or what a VCR does. Ask your parents, kiddos. Shipping and handling not included. It's easy to forget just how big a star Luger was, but if you just close your eyes and listen to this track, you should be transported back in time to when pro wrestling could only be watched on Saturdays and Sundays. And if you don't remember that, well then you must have been born after Al Gore created the internet. This underrated late 80s theme titled Overdrive features, in my humble opinion of course, one of the nastiest opening guitar riffs in wrestling-themed song history. Simple, effective, and yet so memorable, it all meshed together to form the total packages persona. The guy with a human torture rack finisher who had classic matches with future WWE Hall of Famers like the Nature Boy Ric Flair, Ricky the Dragon Steamboat, Stan the Larry at Hansen, and the Undertaker aka Mean Mark Callis, no relation of course, will be forever linked to this theme music for me, and also linked to the WCW United States title, which he won an incredible five times. Luger cemented his name in the record books as he held the US belt for a record setting 523 days before winning his first WCW World Championship. Although technically he won the NWA Western States Heritage title, that had been altered to resemble the world title after the Nature Boy took big gold to the WWF.  Luger was always a physical freak during his in-ring career, an egotistical slab of meat who spent as much time flexing in the mirror as he did wrestling. And boy, did Lex love to flex. The dude was always on TV, bouncing his boobies back and forth and back and forth. So when Luger negotiated his release from WCW in 1992, Vince McMahon was quick to snatch him up, but it wouldn't be for Lex's wrestling ability. Oh no, rather it was to become the poster boy for Vince's latest pet project, the ill-fated bodybuilding organization known as the WBF. However, an unfortunate motorcycle accident put Lex on the shelf for a while, and by the time he was healed up and ready to go, the WBF was already out of business. So now it only made sense for McMahon to bring him in as a full-time WWF competitor. Now the gimmick of the narcissist was the brainchild of Hall of Famer Pat Patterson, who could tell that playing an arrogant self-centered heel would be right in Luger's wheelhouse because of his inherent love-fest with himself and his physical perfection.  This masterpiece of an entrance theme created by Jim Johnston was used to introduce The Rock's quote-unquote high school sweetheart during mankind's famous This Is Your Life Skip back in 1999. And bonus points for you if you can remember her name and leave it in the comments down below. Perhaps no superstar was pushed so hard and so fast, then the total package was after Hulk Hogan's WWF departure in 1993. Poised to pick up where the Hulkster left off, Luger arrived via helicopter to the deck of the USS Intrepid on America's birthday to body slam, or possibly hip toss, the 600-pound-plus heavyweight champion Yoko Zuna and set up a much-anticipated Summer Slam showdown. Cementing himself as one of the good guys now, Luger became an American original, bathed in patriotic decor. He quickly embarked on the now-infamous Lex Express nationwide tour, traveling the country in a red, white, and blue painted bus, shaking hands, and kissing babies. And while Lex emerged victorious over Yoko at Summer Slam, it was due to a count-out, which I guess everybody except Luger know didn't lead to a title change. But for whatever reason, the babyface locker room sprinted to the ring and celebrated like Lex had won the belt, sorry, title, and that the mission was accomplished. With stars and stripes forever echoing throughout the building, this befuddling booking decision went over like a lead balloon for most fans, and soon all the air fizzled out of his face turn. Although Luger did go on to become a co-winner of the 1994 Royal Rumble and co-main event WrestleMania 10, for all intents and purposes, the Lex Express had officially crashed and burned. Not even Luger's feel-good All-American patriotism could salvage the man that Vince McMahon had hoped would lead the WWF's new generation. Instead, the WWF universe took a liking to Bret Hart, and Vinnie Mack had no choice but to make the hitman the main man. With Lex's main event run all but over, Luger was left to linger in the lower midcard, feuding with the likes of Evil, Finnish environmentalist Ludwig Borga, Shakabra, Kona Crush, and that million-dollar corporate sell-out to Tonka. This theme lasted, Lex, about a year or so, until it was remixed into a bangers and mash-up, so to speak, for a new patriotic tag team. Coming off a failed singles push, where Luger performed admirably as a babyface, and although he wasn't the greatest in-ring worker, he wasn't incredibly offensive either. However, the beginning of the end of his WWF tenure saw Lex placed into a tag team. Sticking two struggling single-stars together, Luger joined forces with the British bulldog Davy Boy Smith to form the Allied Powers. A nod to the relationship between the United States and the United Kingdom. Not quite on the level of FDR and Churchill, the duo's only success would come over beating jobber tag teams like Men on a Mission, Jacob and Eli Blue, and Well Done. Unable to capture the WWF tag team titles from Owen Hart and Yokozuna, during the summer of 1995, soon dissension began to be teased between Luger and the bulldog, most likely leading to yet another America versus a foreign heel storyline. But Lex's WWF contract expired to the knowledge of freaking no one, and he left the company becoming the proverbial first shots fired in the new Monday Night War. Luger has always felt more like a WCW guy to me. And of all the themes that Lex had during his wrestling career, this energetic thumping guitar-laden track is probably the one that most hardcore fans remember. This song definitely had a throwback feel to it that tipped its cap toward the bygone, hair-metal genre. Luger used this music when featured as both a babyface and as a heel, which is fine when you consider that its generic nature works for either type of character. When Luger re-debuted for WCW on the inaugural episode of Monday Nitro, it was as a traitor in a frilly, puffy shirt returning to where the big boys played. He was a tweener, someone who was simultaneously Sting's BFF and a loose associate of Jimmy Hart and the Dungeon of Doom, cheating to win his matches and plotting to end Hulkamania. However, by 1997 and for a brief moment, the total package was the company's hottest white meat babyface, and the man responsible for taking the WCW Championship away from Hollywood Hulk Hogan and the NWO, if only for five days. Once a sworn enemy of the New World Order, Luger shocked the world and joined the face version of the Wolfpack alongside Kevin Nash and the macho man, Randy Savage. Not someone who'd you consider to be a hip-hop aficionado, this song slaps harder than slammer and lets fit in well with the group and became the pack's head recruiter, eventually convincing the Stinger to join the faction. The reveal of Sting now representing the red and black with the Wolfpack shirt received a massive pop and was the group's top moment, but then WCW being WCW blew the big money match fans were waiting on between big sexy Kevin Nash and Hollywood Hulk Hogan. The finger poke of Doom heard round the world was the moment the Wolfpack jumped the shark and WCW never recovered. As a self-proclaimed Lex Luger Mark, watching Lex's final few years were very difficult for me.  This is some real wrestle crap at its finest here, and the aging process also hurt Luger's overall athleticism, so he was put in tag teams with The Nature Boy, aka Team Package, and Buff Bagwell, aka Totally Buff. And so on a side note as we wrap up this documentary, it needs to be said that Lex Luger deserves to be in the WWE Hall of Fame. The magnitude of his star power necessitates his inclusion, and while it's true he's had some tough times both emotionally and physically. He's no longer the total package of old, but a kind and humble man devoted to God full of positivity and grateful for his fans. And that's it for this documentary. I hope you've enjoyed this episode and I look forward to taking you further behind the themes in future documentaries. Now if you have any suggestions or recommendations for us, please leave a comment down below and don't forget to give this video a massive thumbs up. Go ahead and also share it with a friend who you think might also like it because it really helps our channel grow and reach new people. Also, if you haven't already, please consider subscribing for weekly wrestling, theme song content, and don't forget to follow us on social media so you get all our latest updates. And we'll see you next time wrestling behind the themes.


Hi, everyone. Hope you are well, staying safe and healthy. Welcome to the stock. My name is Hossein Hadifur, and I'm going to present our paper entitled Comprehensive Security Analysis of Crafts, which is a joint work with Söder Söderi, Magic Nicknome, Link Sound, and Nestor Bögeri. Let's start. I've divided my presentation into four parts. I like to begin by giving a short description about craft. Next, I'm going to discuss about the improved zero-correlation distinguishers we have provided for craft. And quickly after that, I will recall the relation between integral and zero-correlation distinguishers and introduce our new integral distinguishers for craft in this section. Finally, I'd like to tell you about how this experiment improved the differential distinguishers of craft in a single-toic model.  Craft is a light with a skinny-like tweakable black sniper that has been introduced in FSE 2019, for which the efficient protection against differential fault-effects has been considered from the design phase. It receives a 64-bit plain text with 128-bit key plus a 64-bit tweak, and then iterates 31 same rounds plus one linear round to produce a 64-bit Cypher text. As you can see in this picture, each round of craft, excluding the last one, performs five basic operations on the internal state. The internal state of craft can be viewed as a 4x4 array of nevron. The first operation in each round is mixed-gallon, in which the internal state is multiplied by an involuntary binary matrix. Then, round-dependent constants and round-tweaky are explored to the internal state. After that, an involuntary permutation is applied on the position of the nevron. Lastly, as the only non-linear operation in the round, the same 4-bit S-box is applied on each nevron. The last round doesn't include pyramid nevron and S-box, and it is totally linear. Round-tweakies of craft are produced using a simple tweak-a-schedule. Tweak-a-schedule of craft splits the 128-bit key into two 64-bit keys, K0 and K1. Then, together with the 64-bit master tweak, T, it generates four tweakies according to these relations, where Q is a permutation on the position of two echnibals. Then, a starting from TK0 craft uses these four tweakies periodically. That's all I wanted to tell about craft. Now, let's move on to the next part of this talk in which I would like to talk about zero-correlation-kept analysis of craft. Before discussing about the zero-correlation-kept analysis, let's review the propagation rules for linear masks over the basic operation of blood typhers, including XOR, branching point, and SBOX. As you can see, all input-output linear masks of XOR must be the same. For branching point, the XOR of outward masks must be equal to the input mask. And the input-output masks of SBOX must satisfy the linear approximation table of SBOX. Now, by giving a simple example, I'm going to show the impact of considering tweaky schedules in zero-correlation-kept analysis. I've taken this example from the Ross-Einkely et al. paper at FSC 2019, where they considered tweaky schedules in zero-correlation-kept analysis for the first time. As you can see in this picture, this toy tweakable black cipher includes only two routes, and the same tweaky is used in both rounds. Now, assume that gamma 0, gamma 1, and gamma 2 form a linear strain for the data path of this cipher. So, let's consider the tweaky schedules in our analysis. As you can see in this picture, at positions where the round tweak is XORed to the internal state, linear masks of tweaky states are the same as the linear mask of internal states. On the other hand, because of branching points in tweaky schedules, the input mask for master tweak, which is denoted by alpha here, must be equal to the XOR of gamma 0, gamma 1, and gamma 2. Hence, extra constraints is induced when we consider the tweaky schedule that is linear as well. In conclusion, the possibility of fixing a zero correlation distinguisher is increased when we consider the tweaky schedule. Considering the tweaky schedule, our strategy to search for zero correlation distinguisher can be divided into two parts. At the first part, which is performed by computer, we generate a bit-oriented MISD problem to model the propagation of linear mask. Then, for all possible input-output masks with having weight as one, we call an MISD solver such as URV to solve the generated model. The input-output mask for which the MISD problem becomes invisible, yet as zero correlation distinguisher. At the second part, which is performed by human, the contradiction inside the discovered zero correlation distinguisher is extracted using manual approach. It should be noted that the linear behavior of craft depends on the starting bound. Given that four different tweaks are used in craft, it is set up to investigate four possible cases, which are denoted by RT0, RT1, RT2, and RT3 RT3 here. RT0 denotes the case in which the distinguisher begins from where the TT0 is used. RT1, RT2, and RT3 are defined in the same way. Using our strategy, we provide 14 round zero correlation distinguisher for craft, which improves the previous results by one round. The specification of our zero correlation distinguisher for cases RT0, RT2, and RT3 are represented here. Here, S3 depicts an arbitrary value, and gamma and delta are non-zero nevels. The linear mask of tweak for our distinguisher in cases RT2 and RT3 is the same. And as you can see, all nevels except for the elements one in the tweak mask can take an arbitrary value in all of our distinguisher.  Moreover, we showed that there is no 14 round zero correlation distinguisher in case RT1. Right. Let's move on, and take a look at our distinguisher for case RT0 in more detail. Using this shape, we prove that the correlation of linear approximation that is provided for 14 rounds of trapped in case RT0 must be zero. To do so, we follow the propagation of input and output linear masks for several rounds in forward and backward direction respectively. In this shape, white, black, and gray cells illustrate the inactive, active, and unknown cells respectively. Then, we add the tweak schedule in our analysis. As you can see, because of XOR, the round tweak mask must be the same as the internal state mask after the add round tweak layer. Now, I want to draw your attention to the element cell of tweak mask that is tracked by retrain over the tweak schedule throughout these four rounds, 14 rounds. It can be seen that it is inactive everywhere except for two rounds, including rounds 5 and 6. Given that the value of the cell in tweak mask is equal to 8 the XOR of elements in 8th position, in round tweak of rounds 5 and 6 respectively, must be equal to 8 branching point in tweak schedule. Now, keeping this relation in mind, I want to draw your attention into rounds 5 and 6 where the contradiction is occurred. In this shape we focus on rounds 5 and 6. If we look at this figure you can see that the value of active cells that are illustrated by yellow frames in the left side must be the same. Similarly, the active cells marked in green frames at the right side of the figure must be the same as well. Therefore, this relation between the cells of tweak mask that's what drives in the previous slide can be converted to this relation between active cells in linear masks of internal states somewhere before and after the aspect layer of round 5. On the other hand GOMA511 and GOMA860 are the input and output linear masks of the same spots respectively. Therefore, there must exist a pair such as X, Y satisfying the linear approximation table of the spots such that the XOR of X and Y equals to 8 as well. However, referring to the linear approximation table of craft spots, one can see that there is not such a pair. And this is contradiction. As you can see the contradiction is occurred in bit level in this case. Whereas the contradiction occurs in board level for our distinguisher in cases RT2 and RT3. Here, I conclude this part and move on to the next part to discuss about the integral distinguisher of graphs. In ASCII Actrips 2012 Buk-Dano-Mason revealed a fundamental relation between zero correlation and integral distinguisher where they proposed this theorem for the first time. More precisely, let f be a function from f2 to dn to f2 to dn and a be a sub-space and beta is a non-zero vector such that also this is a zero correlation linear approximation for any alpha in A. Then, for any lambda in f2 to dn this linear combination of the output bits is balanced over the orthogonal complement of A. The next theorem shows that the set of input maps should not necessarily form a sub-space and a non-trivial zero correlation linear halt can always be converted to an integral distinguisher. Therefore, based on this relation we can convert our zero correlation distinguisher to integral distinguisher for the same number of rounds. Given that only one level of tweak is involved in our zero correlation distinguisher attacker can choose an arbitrary fixed value for the other two ignibles and the domain space of the corresponding integral distinguisher is 68 instead of 400 to 28. On the other hand, the required data for the corresponding integral distinguisher must be taken from the orthogonal complement of A. In conclusion, the data complexity of the corresponding integral distinguisher equals to 2 to the 68 minus dimension of A. This table summarizes the specification of our integral distinguisher. As you can see, they cover 14 rounds of graphs where the best previous integral distinguishers cover up to 13 rounds of this type. Now we come to the last part of this talk where I'd like to tell you about how we use a combination of automatic methods based on set solver and partitioning techniques to significantly improve the differential distinguishers of graphs in single tweak models. Our strategy to search for the best differential trace can be divided into three steps. Given that finding an actual differential characteristic is a time consuming task to estimate of it, we use a word oriented mind piece or set model to find the optimal truncated differential characteristic at first. Next, using a bit oriented mind piece or set model, we look for an actual differential trace satisfying the discovered truncated trace. If there is not any actual trace instantiating the discovered truncated pattern, we try another truncated pattern. In order to evaluate the differential effect we use Kupter SMT. Kupter SMT and set solvers, which performs the following steps to evaluate the differential effect. The problem of searching for the best differential trace is encoded into a set problem in CNA form at first. Next, the input and output differences are fixed. And after that, a set solver such as a cryptomine set is called to fit to find one solution X. Solution X here is for example a differential trace. Soon after finding a solution some new constraints are added to the model to exclude the previous solution and again the solver is invoked to find a new solution. Steps 4 and 5 are repeated until the problem becomes unsatisfiable, which means all differential trace with the given input-output differences have been found. Lastly, the probability of all discovered differential trace are added together to compute the differential effect. It should be noted that Kupter SMT used a naive approach to encode the differential distribution table of a spot. Therefore, we decided to optimize the S-box encoding to SBDOP the search. To do so, firstly, we used the DDT of this box into this Boolean function where X and Y are the input-output differences respectively and P is a 3-bit binder vector such that the integer sum of P0, P1 and P2 satisfies this relation. Next, we obtained the minimized CNF representation of this Boolean function using Klein-Maklesky or Schrodinger-Adderton and used this minimized CNF representation in our model. Upline our simple strategy on 10 rounds of graph we found a differential distinguisher with probability of 2 to the minus 50.25. Whereas the best previous single tweak differential distinguisher covered 10 rounds with probability of 2 to the minus 62.65, 61. However, competing the differential effect using this strategy is a very time-consuming task especially for higher number of rounds. For instance, the enumeration of about 2 to the 21 optimum differential trace for our 10 round distinguisher took about 4 days on a desktop and we had to entrust it due to the lack of enough memory. This limitation motivated us to exploit graph properties to estimate the process. Looking for a better strategy, we had some observations. We observed that for these input-output differences there is always an optimal differential train with the same activity pattern for every even number of rounds starting from 8 rounds. We had a similar observation for odd number of rounds with these input-output differences. Another interesting observation is that these distinguishers can be divided into 3 different parts where the middle part is a repeatable one. These inspiring observations led us to the partitioning technique. For example, this figure represents 3 parts of our distinguisher for 10 rounds of graph. Let me explain this figure in more detail. All color cells except for cyan color cells represent active cells for an optimal differential train with a fixed input-output differences. Cells highlighted in cyan represent them in active cells due to the cancellation after miscolon. As you can see, the middle part can be repeated as much as required to construct longer distinguisher since its input-output activity patterns are the same. Moreover, as you can see the difference at 14th and 10th position of X4 here, I mean. Must be the same and they both must be different than the difference at 6th position of X4 to satisfy the optimum truncated pattern that is depicted in this figure. Therefore, there are in total 3,150 possible cases for the internal differences at 6th output of the first part. A similar argument can be provided for the input-output differences of the middle part and input difference of the last part. Now, given that, competing the differential effect for each of these as smaller parts is too much easier than competing the differential effect for the whole distinguisher, we compute the differential effect of each part separately at first. To do so, for all possible output differences of the first part, for example, we compute the differential effect and store the result into a matrix. In the same way, we compute the differential effect for the middle and last part, for all possible cases. Finally, assuming that Kraft is a Markov cipher, the total probability is obtained by multiplying the probability matrices provided for each part. Given that, there are in total 3,150 possible values for the internal differences, and we were not able to compute the differential effect for all of them using our computational sources, we limited the intermediate active levels to be in a special set. Referring to the Kraft's box, we choose this set which consists of 5 differences including 5, 7, A, D and F because of two reasons. Firstly, for each x in this set there exists a Y in the set such that the probability of x to y is maximum since as you can see the Kraft's box is a differentially four-uniform box. Secondly, for each x in this set and for each z out of this set the probability of x to z is non-optimal. Now, as you can see in this picture by limiting the active levels in the output of the first part to be in a specified set there will be only 100 possible cases for it. The input output differences of the middle part and input difference of the last part are limited in the same way. Consequently the number of possible cases and the size of probability matrices for each part will be significantly reduced which makes us able to efficiently compute a lower bound for the differential effects of longer distinguishes. Thanks to the combination of partitioning techniques and automatic methods based on sets we could significantly improve the single-trick differential distinguishes of Kraft. For example, as you can see in this table we concatenated three smaller parts of lengths 4, 4 and 6 as first, middle and last part respectively a 14 round distinguisher. That completes my presentation. Now, we come to the end of this talk where I have summarized our main results as you can see we improved the single-trick differential distinguishes of Kraft by 4 rounds and we improved zero correlation and integral distinguishes of Kraft by 1 round. Before I finish, let me just say that all of our codes are publicly available via the following link. Thank you for listening.