 You made it. I have your slide. Good. Oh, the weather wasn't as great today, huh? Oh, all right. Too bad. You made it, OK. Good, OK. Welcome back. Welcome to the IACR membership meeting of this Eurogroup. The IACR membership meeting is the most important part of the conference, because otherwise the conference wouldn't exist if there was not the IACR. So I'm going to give you an overview of IACR activities, and we will also have time for an open discussion of IACR matters before the Rump session will start later on. And the logistics of the food, I have to turn over this to Christoph later. Yeah, the membership meeting, here's a brief summary of the agenda. The new things will come under publications and at the end. The IACR, in case you have not noticed, is the International Association for Cryptologic Research. It has been found in the 1983 as a tax-exempt nonprofit organization in the United States. And with one picture here, we have tried to put everything on this one slide and had to rename some of the things for this year. Generally, on those slides, if you've come to more of those meetings in the past, you can do a differential attack in the sense of most of the things that's read, that's changed from last time. So in particular, we now have, so we used to call crypto, Eurocrypt, AsiaCrypt conferences, and JS, FSC, PKC, and TCC. We used to call them workshops. And if you've paid attention earlier this year, then we call them now area conferences. And the crypto, Eurocrypt, we call them general conferences. Because some of those conferences have workshops of themselves. And some of them have several hundred participants. So it might sense to have different terminology. And the other thing is the proceedings. So the FSC conference will start or has started is starting the transactions on symmetric cryptology. We'll talk about this. So if you attend this conference, you are going to be a member of IACR in 2017. If you're not yet a member for this year, you can still become one until September by registering and paying the membership fee on the website. Here's the statistics of how the membership has developed over the years. So there are some bumps, depending on where the locations of the major conferences are. And what we are stable around 1,400 to 1,600 members on average. And as I said before, the membership count for 2016 can still grow if people want to sign up on the website. Here is a bit of demographics. I'm not actually sure how this is derived, but our database system seems to know this. So probably it's by email address. And this means that probably the dot-coms are mapped into the United States. It could also be by the country code, but it makes sense. I mean, all that matters here is that we have a global distribution across all countries, and we are represented all over the world. There is a board of directors that is responsible for running the IACR. The board of directors contains nine elected directors and four elected officers and appointed directors. These are people who are, for example, organizing conferences or take special functions like communications for the website and so on. I like everybody who is a member of the board of directors to stand up. Oh, wow. This is very good. So we have Marta and the secretary, Greg, the treasurer, George, David, Bart, and Brian, and Daven, and Ivan. Nigel Smart and everybody else who's standing in the back will become a member if they run for election. So we have an election. It's a democratic system. We will run an election of three director positions every year, and we also run an election every three years of the officer positions. This year happens to be one of those bigger elections, so officers will be re-elected as well or elected newly. There is an election committee starting to work, getting in touch with any member of the board if you are interested in serving on the board so that we can find a proper place for you on the election ballot, on the candidates list. The elections will be done online with the email address that you have registered at ISDR using the Helios voting system, as you've probably seen. We published a journal of cryptology. The editor-in-chief is Ivan Damgard. You are no longer getting that journal of cryptology on paper unless you opt in and you pay extra $20 on the website. And this you can do when you register for the conference for the first time in a calendar year. We publish before we continue publishing the journal of cryptology, we also need a new editor-in-chief because even Damgard is retiring from this position at the end of the year. And a search committee has been formed with the members up here. And we will organize and orchestrate this search throughout this year so that we can ensure the transition of the journal of cryptology. Definitely if you know about some good candidates come talk to us, yeah. The proceedings is what collect conference results. We have so far published in LNCS with Springer. There is now a change in this because we are moving the proceedings of FSC away into a newly formed transactions on symmetric cryptology. I'll talk more about this later. The proceedings are accessible on the web on the Springer library. And they are membership access control for the first three or four years after the conference takes place. And for this you have to go to the ISR website and authenticate with your ISR credential and go to the Springer website for this. Four years after the conference, they turn into open access for everybody. So all the older material is there without the paywall. We are running cryptology schools. We have started this two or three years ago in a sense of a repeating regular program where we have two submission deadlines each year. And we are sponsoring two or three schools, on average, with amounts of like $5,000 or $8,000 for covering expenses like invited speakers. These are typically educational schools, one week long schools where experts in the field teach to students about their particular field of expertise. The next round of proposals for such schools is due mid of the year for schools that will take place early next year and into 2017. I'm going to tell you later what are the schools that have already been approved and will take place in 2016. But you can find all this information on the website as well under the URL slash schools. Then we are also running the fellows program. As you've seen last night, the IACR recognizes outstanding IACR members for technical and professional contributions. And the IACR 2016 fellows are Ed Dawson, Shai Halevi, Victor Schup and Nigel Smart. Congratulations again. Also this process is run in a yearly cycle. Nominations are due by the end of the calendar year. And do I have to commit to you here? No. The committee will be announced on the website. OK, online services. We are running online services on our own website at IACR.org or also at IA.CR. And here is a brief summary of some of those. During the last year, you might have noticed that we have reformed, thanks to the great help of Mike Rosoleck, the communication secretary, the news alert system, which is a consolidated news feed where you can select by particular channels what you are going to be interested in. You can go to the website on this IACR.org slash news and have a personalized feed. You can also connect to those feeds through your favorite channels, such as Facebook, Twitter, Weibo, and that's about it. But the IACR email subscription there is the one that you can use with your personal email address that will be sent an email. You can configure it to send email daily or weekly or something like that. Then we have this access to the publications. This is the short URL here is the IACR.IA.CR slash pubs that brings you to this page. But it's also accessible from the website on the publications, where you have the multiple versions of papers that we have depending on your current location and access credentials. You can go there and that means you get access to all the IACR owned publications through this as a member. Then there is the Cryptology E-Print archive on the website. There is a list of open positions that is also quite useful to a lot of people in the community. There is a list of events, a calendar of events, and workshops called for papers. There is also a museum of historic papers that is starting to be collected, showing the age of our field, of papers that have a lot of historic interest and that have not been made available in easy form otherwise. There is a cryptographic bibliography database of all the IACR publications. And there is also a mechanism that we have started for members to sign petitions because cryptology is, again, and continues to be a politically interesting subject. That means that from time to time, we may make a political statement and we do this with a form of a mechanism where members can sign a petition on behalf of the IACR via the website. There is a Cryptology Research Fund for Students, which was created in 2014 with a donation from cryptography research. And that's now at Rambas, the company. This money is used for sponsoring, primarily, sponsoring student attendance at our events in the sense that the student speakers get the registration fees waived at all the IACR conferences. And also, we're using this to support the school's program. So we are making this available for educational purposes. There is a Cryptology E-Print Archive. And here I have something to mention in the sense that, while the editors have been Sasha and Nigel for a longer time now, we can now handle more than 1,000 preprints per year. We had one time we had a report 1,000 problem. But here is some advice for everyone of you who will post papers on this. Based on experience, and this is from Nigel and Mayon and Sasha's experience, if you post a paper or submit a paper, don't just copy and paste the abstract from your source because it will contain LaTeX codes. And they're not visible. They're not self-contained. Same if you copy and paste your abstract from the PDF. These characters like FF and Fi will not survive the copy-paste operation. And so we would like you to spend some work actually making sure that your abstracts are properly formatted and properly self-contained. And this is also a reason for rejection sometimes. On the other hand, what we have implemented during the last year is that if you include mathematical things, mathematical statements in LaTeX format, it's actually shown on the browser through a piece of JavaScript magic in the mathematical form. So the only LaTeX that's allowed there is your math. The second thing is that the IACR wants you to upload the final versions of your papers to the E-Print archive, also for the record. And in the process of collecting the final versions for the conference submissions, we're also asking you to do this. And if you don't do it yourself, then there is a script in the background that will just upload it. And of course, if you revise it later, it will not be revised in the E-Print archive. So it's good practice that you take care of yourself of uploading your papers to the E-Print archive. OK, financial report. And I've seen that Greg made it so we can hand over the mic microphone to Greg for the finances. I have to find it. Perfect. Financial report for last year. Hi, I'm Greg Rose. I'm the treasurer. The summary doesn't seem to change much from year to year, except for when somebody gives us a million dollars. So if there's anybody who wants to see these slides change, that's really easy. Just give us a million bucks. So strong financial position, extremely low overhead. I say that every year. Financial support from sponsoring organizations for the conferences this year was, well, last year was particularly strong. I've got to shout out to the organizers of last year's Eurocrypt in Sofia, whose names are escaping me at the moment. But that's, of course, I'm hopeless. They did a fantastic job of getting sponsorships. And so our sponsorship income was up a little bit. And attendance at the events was slightly up. So that's the slightly up attendance graphically. As you can see, there's nothing that really stands out as being unusual. Attendance at Chairs was sort of noticeably up. Attendance at Crypto was slightly down. Asia Crypt was down a little bit, everything else. That's pretty normal. But it was a 7% increase across the board. So that's good. Profit and loss on the left side, you can see the split up of the income. So registrations for conferences and so on. Chairs brings in the most money. That's been a pattern for a number of years recently. Eurocrypt and Crypto usually fight it out for second place. The smaller workshops and donations and endowments and stuff like that makes up the rest of it. And a bit of interest income. But the interest is relatively negligible, except for the endowment. And for that, I lump that into the endowment. Our expenses, as you can see the top pie chart on the right, is basically almost all of our money goes towards the conferences. No big surprise. We tend not to split that out, particularly partly for accounting reasons and partly because we don't want to point fingers at anybody and say, you made a terrible loss. Particularly because we actually tell them that it's OK to make a loss because they can't necessarily account for exchange rates and things like that. If you take the general administration and the credit card fees out of that top pie chart because they're such small slivers and you break them up, you get that bank fees, a surprisingly large chunk of our expenses. That's mostly credit card fees. A little tiny bit of legal, a fairly small amount. By the time you've got a pie chart, we've got a pie chart that wedge for a secretary that is very small. And last year, as Kristen mentioned, we did a bit of work on revamping the website. So we did spend some money on the website that wasn't there last year. I should say not final. We've sent it off to the accountants for their approval but haven't got that back yet. Funds on deposit, a million dollars from CR, from cryptography research as of two years ago. Yes, two years ago. So it really came in late in 2014. I just show that separately. That's in a bond fund that generates enough income and enough capital growth that we should be able to fund the student programs and the schools and the stipends and the student speakers essentially forever. Just out of that one fund. The yellow is the money that wasn't in the fund, that's still in the fund. And the little, tiniest livery of red is the net income, which is actually negative. I don't know how to display a negative number in a pie chart. But the point is it's little. Change is very little from year to year. So we're fine. And as I said, we do tell the chairs it's OK if you make a loss because it could be exchange rates or student subsidies or whatever. So that's fine. The highlights, I just mentioned the CRI fund. And thanks very much again to Paul Coacher and cryptography research for that. We do target break-even. It's OK to occasionally make a loss. We do keep the overhead is very minimal. If you wonder why we're always in Santa Barbara, it's because the secretariat is the University of California, Santa Barbara. And they charge us, essentially, peanuts, pocket money to do that for us. The Treasurer has one job that's in the Constitution. And I actually deleted this slide a couple of times in the past and then realized that no, it's actually in our bylaws. I have to recommend every year what the membership fee is for the next year. For the year after next, actually, should be. So my recommendation as Treasurer is not to change them. We're still trying to figure out having taken the journal out of the membership fees that used to be all bundled. We're still trying to figure out, is that going to work, how that's going to work, and so on. So my recommendation is not to change anything. $50 for four members, $25 for student members. And for the gray hairs in the audience, I'll just mention we now have a lifetime membership. What's it called? The lifetime membership for older professionals. Senior membership. Thank you. We have a senior membership. I'm having a senior moment. I will qualify in very short time. Any questions on any of that? Happy to answer. No? OK. Thank you. Thank you, Greg. And thank you in the audience for silently approving with the proposal as well. Or did anybody want to discuss the membership fee? No, then we leave it like this. In this case, we have to go find our other presentation again. Publications. Yes, this is why we are here, why a lot of people are here. Open Access has been discussed in the last years a lot in the connection with publications. And just to set the stage clear here, I'd like to repeat here what are the forms of Open Access that we are talking about here. A green Open Access means that the author can publish their own versions on the website and pre-print servers, e-print archives, and so on. And this is what we indeed have for our publications in the LNCS model during the first four years and for the Journal of Cryptology papers. And note that in other fields, sometimes one doesn't have that. And Gold Open Access is when the publication itself on the main publication, the definitive form, is accessible freely through the internet. And this is the case for all our conference proceedings from four years or more after their publication. And it's also the case for the newly formed transactions on symmetric cryptology. And so I've talked so much about this that I have to come there now and explain to you what this means. So we are moving away from the proceedings of FSC in LNCS towards a new transactions, IACR transactions on symmetric cryptology. This is connected to the FSC conference in a way that I'm going to explain right now. So it's a journal in the sense that it will have a multi-round reviewing process. It's also a conference-related publication because publishing in transactions on symmetric cryptology gives you a mandatory speaking slot at the FSC conference. So in that sense, it's a conference journal hybrid. And there are a few others in computer science of the same kind, in particular the proceedings of the VLDB, which is the one that pioneered this model. And proceedings of privacy-enhancing technologies imposing the POPETs is another one that many of you might be familiar with. This journal will be published electronically only on a website. I mean, and it was obviously gold open access. And in order to keep the reviewing process stringent enough, it is the case that the submissions can take place throughout the year, but response time is guaranteed according to a strict synchronization schedule. So you can read the details here. There are going to be on the regular operation in the stable operation mode. There are going to be four submission deadlines per year. They're going to be announced. The first three of them are already announced in the context of the call for papers for FSC 2017, because this is in the same form connected to FSC 2017. The decision and the program committee of FSC now, of course, has to work throughout the year. The program committee of FSC does not exist anymore also. It's now the editorial board of the transactions of symmetric cryptology. After two months, you get a decision that can be one of four things, either conditional accept with shepherd. A major revision, then you have to do resubmit. A new decision will be made or reject. And then you cannot submit again. You have to write a new paper. You have to submit a new paper. That means the major revision is perhaps the most interesting mechanism in here, in the sense that you have one or two of these submission deadlines or intervals that you can revise your paper and then you must resubmit for it to be considered as a resubmission. And then the editorial board will ensure that it goes back to the same reviewers that originally reviewed it. That will ensure a continuity in the reviewing process from which we believe that it will actually solve some problems that exist in today's reviewing system where you send to multiple conferences over time based on the acceptance rates. It's clear that about 75% or 80% of the papers on average, on an average submission sample are rejected and have to go again or somewhere else. That means that these papers have more continuity in the reviewing process. And then papers accepted by the end of January in the particular calendar year will be presented at the FSC conference in the corresponding calendar year. And the FSC conference will be in March. Yes, I think that's, yeah. There is more about the mechanics of this. So I mentioned a lot of that. The editorial board is chaired by the co-editors in chief. And this is Bart Prinell and Maria Nia Plasencia. The online service is provided by the library of Bochum University. And it provides this at no cost to the IACR through a very special setup that we were able to negotiate through Gregor Leander at Bochum University. It will be run on an open source reviewing system and for an open source journal publication system. This ensures continuity in the sense that the software is open. And we could also host this somewhere else should this not be able to continue. And of course, it also means that we do not have any significant paid editorial assistance in this process. That's additional work for the authors that who have to make sure that they are using strictly the format and adhere to the schedule of this. So as you can see, the next topic will be the open discussion. So I'd like to open the floor for discussions of this and anything else at this time. Nigel. Well, you can come here. I just want to say something about Eprint. As of 2016, you may submit to Eprint and not violate copyright of any paper accepted to an ACM conference. Yay. So ACM CCS papers, all the versions are now fair game to put up on Eprint where they weren't in the past. ACM in the past claimed the copyright from the moment you submitted the paper to the conference and refused to let you put on an Eprint server. Now you can put on the Eprint server even after it's accepted. So the only one left is IEEE. If there are any IEEE members out there, please complain. Thank you for the clarification. Questions? Discussions? Yes. Shout. I would leave this decision up to the FSC Steering Committee and the editors. I do not think that the editorial board will, on purpose, delay papers from being accepted. That would otherwise have a slot. On the other hand, I think that the quality insurance mechanism should be in place to hold papers to the same standards as they were before for FSC. Would you, Bart, as the editor, want to make some comments on this as well? There will be no paper copies, right? It's just electronic, so there is no limit in that respect. It's just for the slots in the conference. And we can always have parallel sessions at FSC if needed, right? Very good. Except if they're all by the same author, right? Yes. So we've been talking about this hybrid model forever now. And is this considered a trial, or are we going to leave it up to particular venues? What happens if this goes well? This is a very good question. We have tried a couple of times to sort of top down, move away from the current model with some proposals towards a conference journal hybrid, as you remarked. And it has not worked out, yeah? So this is a bottom up. And I think I'm very grateful to the FSC Steering Committee and Bart in person also who put a lot of work in making this happen now so that we can have a role model that others could follow, yeah? And I encourage everybody to think about this if they wanted to have this to happen as well. Maybe people have to see how it works before they're ready to move other things there. We do not have currently a board opinion on whether this is required to go there in a certain number of time. But we are certainly open towards development in this direction, and we will facilitate this in every possible way. I do also think that the mechanics of running crypto and Eurocrypt is slightly different from one area conference in a particular domain that occurs once in a year, because all the other conference journal hybrids that I am aware of are actually also occurring once in a year also. But I think we are moving in small steps now. And that's the good news for all those who have wanted to move towards this for a while already. Yes, Jens. So I guess with this trial with the FSC, we want to see how it goes. And if it's a sex, we'll, OK. So it's a, sure. I guess my question is whether there are, I mean, you've sort of metrics that you can measure, whether this is a good idea or whether it's just kind of going on and feel that in a couple of years, you will say, oh, this seemed good. We'll go ahead with the other ones or not. Well, metrics will have to be formed in everybody's own impression of this. And so this is something that I expect to hear feedback from all of you here and from people at FSC and from people who are related to this as well. Yes. I just wanted to, regarding metrics, I wanted to draw the analogy with the multiple streams in the conferences, which we agonized over back and forth for five, six, seven years. We asked the chairs to try it out. They didn't try it out. We eventually, the board, told the chairs to try it out or else. We didn't say what the or else was. But we forced it to happen. And then in the last election, something like 95% of the members said they liked it. So it's not a trial. It's an evolution, which we're going to try. I think whatever metrics they use for TOSC, which is apparently is that how we pronounce TOSC? Is TOSC would not apply to any other of the area conferences. The FSC community is particularly different in that there's a large number of them actually measured themselves on journal publications. This goes some way to addressing that. And they've already had a post-proceedings. They never had. They weren't like in the model of the other one. So any metric that you chose for TOSC would not be applicable to any other thing. So the idea of choosing a metric would be? Not directly. It's just, yeah, if the people are happy, everyone's happy. You'd be happy. What's also clear is that what became clear in our discussions over the last five years on this, and I think it's not been forever, but like five years or so, that the cryptographers were not considering themselves to be the pioneers and just moving from scratch. So there were always people concerned about not doing also what others are doing. And in that sense, I think we are moving in a direction as others are moving now as well. Other items for discussion? Not only the Journal and TOSC, the TOSC Journal, because we can have a discussion about everything. Yes, Yevgeny? Come on, come here. Are we great? How's our shout? So TCC essentially after the suggestion to the board, the board agreed to try this test of time award. And I think it was a really good idea. So in my opinion, I think test of time awards historically has been proven to be much more meaningful than best paper awards. I don't mind best paper awards, but I think it actually could be a good idea to try test of time awards so that we see that after the hype is like over five, 10 years, which papers kind of survived and which papers made a difference, I think it actually adds a price. And it's actually a meaningful price, and like best paper awards. And I think it would be a good idea to try it. Yeah, to introduce a test of time award. I think you're suggesting this in particular for the Eurocrypt crypto AsiaCrypt conferences. Yes, that's a very good idea, and we will consider this. While this would not be eligible, it was not published at the crypto conference, right? Well, what you're bringing up, of course, is what Yevgeny mentioned. We have a certain age as a field. And if you're very new, you cannot do that. But we are mature enough to have something like a 10 years test of time, yeah? Yeah, but I think we can, like with so many other things, the PC chairs have many things to do. And if they're not all to do the test of time award, yeah? I think the best paper award has been installed in the sense that there should be one. I think there is not always actually one, but there should be one, yeah? Other ideas? Yes? Similar to the fellows where we have a committee, and every year they pick one, two, three papers from the past 10 years, and then at crypto, maybe there'd be a ceremony, and people would get an award there, as opposed to having one at Eurocrypt, one at AsiaCrypt, one at crypto. We're starting now. Should there be one test of time for all of the ISR publications, or should there be one from the conference exactly the same conference 10 years back? So that's two different forms already that it could be done. I think we could, we'll have to decide to consider this, yeah? So you prefer one overarching committee, right? All ISR, I'll be an interesting discussion again in committee, yeah? Including the... Just as a piece of information, and in TCC, there's also a committee just for this. It's not decided by this year's PC. And it's all organized by the steering committee, deciding that it's 10 years, for instance. The steering committee does this. Thank you for that input. Any other items? Yes? Yeah, okay, then we'll go there, okay? So immediately next will be the Rump session. After that will be the next events, okay? So we have cryptology schools, and actually this is the immediately next event in ISR sponsored event will be the Bitcoin School in Greece, as you can see from the URL, blockchain technologies from cryptographic eCash to modern cryptocurrency, very well connecting, and it happens to be a field where I'm working as well, connecting eCash systems from the 90s and so on to what's happening today in the cryptocurrency world. Then there is a school on cryptography just before Asia Crypt in Vietnam, and there's a school on randomness in cryptography in Barcelona in November. There will be also a computational algebraic number theory school in Turkey in September. So these are the schools. Most of those things you should find on the website actually also. Then the next conferences are going to be crypto in Santa Barbara with Brian Lamakia as general chair, and crypto will be collocated with chess this year. So chess will take place concentrated in the second half of the week and crypto in the first half of the week. Then there's going to be Asia Crypt in Hanoi in December, and Euro Crypt next year in Paris. The date is now fixed 30th of April until May 4th, and there is a website up as of like one week. So you can already pencil this into your agendas. There will be crypto 2017 again in Santa Barbara with a distinguished lecture by Shafi Goldwasser, and there will be Asia Crypt 2017 in Hong Kong. All this has already been decided as before this meeting. And here is some new information. Asia Crypt 2018 will be in Tel Aviv in Israel on those dates. Oh, pardon. Yeah, okay, you're right. Too many crypts. But it is somewhat in Asia, but it's actually Euro Crypt, yeah? Or Dunkelman will be organizing this in Tel Aviv, and he has a plan for also bringing FSC to Israel around the same timeframe. Then there will be Asia Crypt 2018. Oh, I'm skipping over crypto 2018 here, but it will be in Santa Barbara, I promise. There will be Asia Crypt 2018 in Brisbane in December with Joseph Pipsik as general chair, and there will be Euro Crypt 2019 in Darmstadt with Mark Fischlin as organizer. And as you see here, we are planning the locations much further out than the program chairs because all those names of program chairs are either not committed or completely unknown yet. And so we'll have to defer these announcements to the websites and online news systems for later. We also have upcoming area conferences. Jess, as I mentioned, is going to be in Santa Barbara colligated with crypto. TCC 2016 B, we had two TCCs this year, one has already taken place in Tel Aviv, and the second one will be in Beijing in November. There is PKC next year in Amsterdam, and I think that's it, right? Well, there is also, I forgot, FSC. There is also FSC in Japan next year, but we just talked about FSC so much. It's going to be in March 2017 in Japan. And I think this is about the information I have for tonight. Yes, TCC, yes, TCC is going to stay in the November timeframe. There are not going to be two TCCs every year from now, yeah? TCC did a shift of time from the early time in the year into November, so the TCC timeframe is now around November. Yes, and now I think I'm at the end, and I would like to ask Bertram or Christoph for the next steps in the program because the Rump session might start at some time. Hello, thank you. Rump session starts in 15 minutes, so I propose we get all drinks there. Food will be eventually served, and enjoy your time. I'll come back to you. Thank you very much, thank you.