Published a preprint and the Code Artifact for On Borrowed Time – Preventing Static Side-Channel Analysis.

The paper On Borrowed Time – Preventing Static Side-Channel Analysis with Robert Dumitru, Thorben Moos and Andrew Wabnitz will appear in NDSS 2025

Our work CryptOpt: Verified Compilation with Randomized Program Search for Cryptographic Primitives won the 2024 German IT Security Prize

Congratulations to Joel Kuepper who completed a PhD on Enhancing State-of-the-Art Techniques Generating Low-Level Code for Cryptographic Arithmetic.

Spec-o-Scope: Cache Probing at Cache Speed received Distinguished Paper Award at CCS 2024.

Testing Side-Channel Security of Cryptographic Implementations against Future Microarchitectures received Distinguished Paper Award at CCS 2024.

The paper BarraCUDA: GPUs do Leak DNN Weights with Péter Horváth, Łukasz Chmielewski, Léo Weissbart and Lejla Batina will appear in USENIX Security 2025

The paper Spec-o-Scope: Cache Probing at Cache Speed with Gal Horowitz and Eyal Ronen will appear in CCS 2024

Published the Code Artifact for Evict+Spec+Time: Exploiting Out-of-Order Execution to Improve Cache-Timing Attacks.

Preprint available Protecting cryptographic code against Spectre-RSB (and, in fact, all known Spectre variants), co-authored with Santiago Arranz Olmos, Gilles Barthe, Chitchanok Chuengsatiansup, Benjamin Grégoire, Vincent Laporte, Tiago Oliveira, Peter Schwabe, and Zhiyuan Zhang.

Preprint available Spec-o-Scope: Cache Probing at Cache Speed, co-authored with Gal Horowitz and Eyal Ronen.

The paper Elephants Do Not Forget: Differential Privacy with State Continuity for Privacy Budget with Jiankai Jin, Chitchanok Chuengsatiansup, Toby Murray, Benjamin I. P. Rubinstein and Olga Ohrimenko will appear in CCS 2024

I have been appointed as an adjunct faculty at the Max Planck Institute for Security and Privacy

The paper Testing Side-Channel Security of Cryptographic Implementations against Future Microarchitectures with Gilles Barthe, Marcel Böhme, Sunjay Cauligi, Chitchanok Chuengsatiansup, Daniel Genkin, Marco Guarnieri, David Mateos Romero, Peter Schwabe and David Wu will appear in CCS 2024

The paper Evict+Spec+Time: Exploiting Out-of-Order Execution to Improve Cache-Timing Attacks with Shing Hing William Cheng, Chitchanok Chuengsatiansup, Daniel Genkin, Dallas McNeil, Toby Murray and Zhiyuan Zhang will appear in TCHES

Preprint available Testing Side-Channel Security of Cryptographic Implementations against Future Microarchitectures, co-authored with Gilles Barthe, Marcel Böhme, Sunjay Cauligi, Chitchanok Chuengsatiansup, Daniel Genkin, Marco Guarnieri, David Mateos Romero, Peter Schwabe and David Wu.

Preprint available Evict+Spec+Time: Exploiting Out-of-Order Execution to Improve Cache-Timing Attacks, co-authored with Shing Hing William Cheng, Chitchanok Chuengsatiansup, Daniel Genkin, Dallas McNeil, Toby Murray and Zhiyuan Zhang.

Preprint available Elephants Do Not Forget: Differential Privacy with State Continuity for Privacy Budget, co-authored with Jiankai Jin, Chitchanok Chuengsatiansup, Toby Murray, Ben Rubinstein, Olya Ohrimenko.

Checking Passwords on Leaky Computers: A Side Channel Analysis of Chrome’s Password Leak Detection Protocol accepted to RWC 2024.

The paper SoK: Can We Really Detect Cache Side-Channel Attacks by Monitoring Performance Counters? with William Kosasih, Yusi Feng, Chitchanok Chuengsatiansup and Ziyuan Zhu will appear in AsiaCCS 2024

The paper CNN Architecture Extraction on Edge GPU with Péter Horváth, Łukasz Chmielewski, Lejla Batina and Léo Weissbart will appear in AIHWS 2024

The paper Pixel Thief: Exploiting SVG Filter Leakage in Firefox and Chrome with Sioli O'Connell, Lishay Aben Sour, Ron Magen, Daniel Genkin, Yossi Oren and Hovav Shacham will appear in USENIX Security 2024

Mingtian Tao's thesis has been awarded the Dean's Commendation for Master by Research Thesis Excellence

Congratulations to Mingtian Tao who completed a Master of Philosophy on Exploring the Vulnerability of Branch Prediction Unit.

The paper SoK: SGX.Fail: How Stuff Gets eXposed with Stephan van Schaik, Alex Seto, Thomas Yurek, Adam Batori, Bader AlBassam, Daniel Genkin, Andrew Miller, Eyal Ronen and Christina Garman will appear in IEEE SP 2024

The paper iLeakage: Browser-based Timerless Speculative Execution Attacks on Apple Devices with Jason Kim, Stephan van Schaik and Daniel Genkin will appear in CCS 2023

Congratulations to William Kosasih who completed a Master of Philosophy on Cache Attacks and Defenses

The paper SledgeHammer: Amplifying Rowhammer via Bank-level Parallelism with Ingab Kang, Walter Wang, Jason Kim, Stephan van Schaik, Youssef Tobah, Daniel Genkin and Andrew Kwong will appear in USENIX Security 2024

Preprint available Leaky McEliece: Secret Key Recovery From Highly Erroneous Side-Channel Information, co-authored with Marcus Brinkmann, Chitchanok Chuengsatiansup, Alexander May, Julian Nowakowski.

Cyber Today, the magazine of the Australian Information Security Association (AISA) has a piece on CryptOpt

SigEVO has a piece on the 2024 Humies Award and on CryptOpt

I will present a keynote titled No Bad Time for Cache Attacks at Indocrypt 2023

Preprint available On Borrowed Time – Preventing Static Power Side-Channel Analysis, co-authored with Robert Dumitru and Andrew Wabnitz.

Our work CryptOpt: Verified Compilation with Randomized Program Search for Cryptographic Primitives won the 2023 Humies Gold Award at GECCO 2023

The paper Checking Passwords on Leaky Computers: A Side Channel Analysis of Chrome’s Password Leak Detection Protocol with Andrew Kwong, Walter Wang, Jason Kim, Jonathan Berger, Daniel Genkin, Eyal Ronen, Hovav Shacham and Riad Wahby will appear in USENIX Security 2023

The paper Hot Pixels: Frequency, Power, and Temperature Attacks on GPUs and Arm SoCs with Hritvik Taneja, Jason Kim, Jie Jeff Xu, Stephan van Schaik and Daniel Genkin will appear in USENIX Security 2023

CryptOpt: Verified Compilation with Randomized Program Search for Cryptographic Primitives will receive a Distinguished Paper Award at PLDI 2023.

The paper CacheFX: A Framework for Evaluating Cache Security with Daniel Genkin, William Kosasih, Fangfei Liu, Anna Trikalinou and Thomas Unterluggauer will appear in AsiaCCS 2023

The paper CryptOpt: Verified Compilation with Randomized Program Search for Cryptographic Primitives with Joel Kuepper, Andres Erbsen, Jason Gross, Owen Conoly, Chuyue Sun, Samuel Tian, David Wu, Adam Chlipala, Chitchanok Chuengsatiansup, Daniel Genkin and Markus Wagner will appear in PLDI 2023

I am starting a new position at Ruhr University Bochum.

The paper BunnyHop: Exploiting the Instruction Prefetcher with Zhiyuan Zhang, Mingtian Tao, Sioli O'Connell, Chitchanok Chuengsatiansup and Daniel Genkin will appear in USENIX Security 2023

Added of CryptOpt: Automatic Optimization of Straightline Code.

The paper Ultimate SLH: Taking Speculative Load Hardening to the Next Level with Zhiyuan Zhang, Gilles Barthe, Chitchanok Chuengsatiansup and Peter Schwabe will appear in USENIX Security 2023

CryptOpt: Automatic Optimization of Straightline Code accepted to the ICSE 2023 DEMO track

CryptOpt, and SGX.Fail accepted to RWC 2023.

The paper The Gates of Time: Improving Cache Attacks with Transient Execution with Daniel Katzman, William Kosasih, Chitchanok Chuengsatiansup and Eyal Ronen will appear in USENIX Security 2023

Added of The Impostor Among US(B): Off Path Injection Attacks on USB Communications.

Published a new HotCRP-style conflicts generator.

The paper HammerScope: Observing DRAM Power Consumption Using Rowhammer with Yaakov Cohen, Kevin Sam Tharayil, Arie Haenel, Daniel Genkin, Angelos D. Keromytis and Yossi Oren will appear in CCS 2022

The source code for CryptOpt is now available.

I will present a keynote titled Side Channels and the Art of Recovering Secrets from your Microarchitecture at DFRSW-APAC 2022

The paper The Impostor Among US(B): Off Path Injection Attacks on USB Communications with Robert Dumitru, Daniel Genkin and Andrew Wabnitz will appear in USENIX Security 2023

Preprint available CryptOpt: Verified Compilation with Randomized Program Search for Cryptographic Primitives, co-authored with Joel Kuepper, Andres Erbsen, Jason Gross, Owen Conoly, Chuyue Sun, Samuel Tian, David Wu, Adam Chlipala, Chitchanok Chuengsatiansup, Daniel Genkin, and Markus Wagner.

The paper Spectre Declassified: Reading from the Right Place at the Wrong Time with Basavesh Ammanaghatta Shivakumar, Jack Barnes, Gilles Barthe, Sunjay Cauligi, Chitchanok Chuengsatiansup, Daniel Genkin, Sioli O'Connell, Peter Schwabe and Rui Qi Sim will appear in IEEE SP 2023

The paper Row, Row, Row Your Boat: How to Not Find Weak Keys in Pilsung with Chitchanok Chuengsatiansup, Eyal Ronen and Gregory G. Rose will appear in The Computer Journal

The paper Opportunities for Genetic Improvement of Cryptographic Code with Chitchanok Chuengsatiansup and Markus Wagner will appear in GI@GECCO 2022

Preprint available Spectre Declassified: Reading from the Right Place at the Wrong Time, co-authored with Basavesh Ammanaghatta Shivakumar, Jack Barnes, Gilles Barthe, Sunjay Cauligi, Chitchanok Chuengsatiansup, Daniel Genkin, Sioli O'Connell, Peter Schwabe, and Rui Qi Sim

I will serve on the PC of CFAIL 2022.

The paper SoK: Design Tools for Side-Channel-Aware Implementations with Ileana Buhan, Lejla Batina and Patrick Schaumont will appear in AsiaCCS 2022

I am co-chairing the program committee of SEED 2022 with Hsien-Hsin Sean Lee.

I will serve on the PC of ACISP 2022.

Preprint available CacheFX: A Framework for Evaluating Cache Security, co-authored with Daniel Genkin, William Kosasih, Fangfei Liu, Anna Trikalinou, and Thomas Unterluggauer

I will serve as an associate chair on the program committee of IEEE S&P 2023.

I will serve on the PC of CCS 2022.

The paper DrawnApart: A Unique Device Identification Technique based on Remote GPU Fingerprinting with Tomer Laor, Naif Mehanna, Antonin Durey, Vitaly Dyadyuk, Pierre Laperdrix, Clémentine Maurice, Yossi Oren, Romain Rouvoy and Walter Rudametkin will appear in NDSS 2022

The paper Side-Channeling the Kalyna Key Expansion with Chitchanok Chuengsatiansup, Daniel Genkin and Zhiyuan Zhang will appear in CT-RSA 2022

The paper RSA Key Recovery from Digit Equivalence Information with Chitchanok Chuengsatiansup, Andrew Feutrill and Rui Qi Sim will appear in ACNS 2022

New blogpost: Surveillance is not necessary for secure vaccine passports

Added a copy of my PhD thesis because everyone should read it.

Received the certificate for the NSA Best Scientific Cybersecurity Paper Competition 2020

The paper Rosita++: Automatic Higher-Order Leakage Elimination from Cryptographic Code with Madura A. Shelton, Łukasz Chmielewski, Niels Samwel, Lejla Batina and Markus Wagner will appear in CCS 2021

The paper Spook.js: Attacking Chrome Strict Site Isolation via Speculative Execution with Ayush Agarwal, Sioli O'Connell, Jason Kim, Shaked Yehezkel, Daniel Genkin and Eyal Ronen will appear in IEEE SP 2022

The paper Row, Row, Row Your Boat: How to Not Find Weak Keys in Pilsung with Chitchanok Chuengsatiansup, Eyal Ronen and Gregory G. Rose will appear in CFail 2021

I will serve on the PC of USENIX Security 2022.

I will serve on the PCs of ACSAC 2021 and SEED 2021

Preprint available , co-authored with Ileana Buhan, Lejla Batina, and Patrick Schaumont

I will serve on the PC of CARDIS 2021.

I will serve on the PC of IEEE S&P 2022.

I will serve on the PC of DRAMSec 2021.

The paper Nonce@Once: A Single-Trace EM Side Channel Attack on Several Constant-Time Elliptic Curve Implementations in Mobile Platforms with Monjur Alam, Baki Yilmaz, Frank Werner, Niels Samwel, Alenka Zajic, Daniel Genkin and Milos Prvulovic will appear in Euro S&P 2021

Added Resources for Postgraduate Students.

The recording of our Real World Crypto presentations on Rosita and CacheOut is available here.

The recording of our Real World Crypto presentation on LadderLeak is available here.

The paper Prime+Probe 1, JavaScript 0: Overcoming Browser-based Side-Channel Defenses with Anatoly Shusterman, Ayush Agarwal, Sioli O'Connell, Daniel Genkin and Yossi Oren will appear in USENIX Security 2021

The paper Security Architecture Framework for Enterprises with Michelle Graham, Katrina Falkner and Claudia Szabo will appear in Enterprise Information Systems

I participated in an episode of the Discovery Pod.

The Spectre paper won the NSA’s 8th Annual Best Scientific Cybersecurity Research Paper Competition.

The paper CacheOut: Leaking Data on Intel CPUs via Cache Evictions with Stephan van Schaik, Marina Minkin, Andrew Kwong and Daniel Genkin will appear in IEEE SP 2021

LadderLeak discussed on Cryptography.FM.

Successful Discovery Project with Chitchanok Chuengsatiansup, Markus Wagner, Jason Xue, and Lejla Batina.

The paper Whack-a-Meltdown: Microarchitectural Security Games with Daniel Genkin will appear in IEEE S&P Magazine

CacheOut, LadderLeak, and Rosita accepted to RWC 2021.

I am presenting Whack-a-Meltdown: a Micro-Architectural Game at SecTalks Sydney

I will serve on the program committee of ACISP 2021

I am participating in a panel on Recent trends in Crypto at ECC 2020

The paper Rosita: Towards Automatic Elimination of Power-Analysis Leakage in Ciphers with Madura A. Shelton, Niels Samwel, Lejla Batina, Francesco Regazzoni and Markus Wagner will appear in NDSS 2021

Our project 'Intelligent Technologies for Smart Cryptography', with Chitchanok Chuengsatiansup, Markus Wagner, and Jason Xue, has been awarded ECMS Seed Funding.

I will serve on the PC of ESORICS 2021.

Added submission history page.

I am humbled and honoured to be named as a recipient of the SA 2020 Tall Poppy Award.