News
4 Apr 2024
The paper Testing Side-Channel Security of Cryptographic Implementations against Future Microarchitectures with Gilles Barthe, Marcel Böhme, Sunjay Cauligi, Chitchanok Chuengsatiansup, Daniel Genkin, Marco Guarnieri, David Mateos Romero, Peter Schwabe and David Wu will appear in CCS 2024
16 Mar 2024
The paper Evict+Spec+Time: Exploiting Out-of-Order Execution to Improve Cache-Timing Attacks with Shing Hing William Cheng, Chitchanok Chuengsatiansup, Daniel Genkin, Dallas McNeil, Toby Murray and Zhiyuan Zhang will appear in TCHES
2 Feb 2024
Preprint available Evict+Spec+Time: Exploiting Out-of-Order Execution to Improve Cache-Timing Attacks, co-authored with Shing Hing William Cheng, Chitchanok Chuengsatiansup, Daniel Genkin, Dallas McNeil, Toby Murray and Zhiyuan Zhang.
24 Jan 2024
The paper SoK: Can We Really Detect Cache Side-Channel Attacks by Monitoring Performance Counters? with William Kosasih, Yusi Feng, Chitchanok Chuengsatiansup and Ziyuan Zhu will appear in AsiaCCS 2024
11 Jan 2024
The paper CNN Architecture Extraction on Edge GPU with Péter Horváth, Łukasz Chmielewski, Lejla Batina and Léo Weissbart will appear in AIHWS 2024
17 Nov 2023
The paper Pixel Thief: Exploiting SVG Filter Leakage in Firefox and Chrome with Sioli O'Connell, Lishay Aben Sour, Ron Magen, Daniel Genkin, Yossi Oren and Hovav Shacham will appear in USENIX Security 2024
8 Nov 2023
Mingtian Tao's thesis has been awarded the Dean's Commendation for Master by Research Thesis Excellence
5 Nov 2023
Congratulations to Mingtian Tao who completed a Master of Philosophy on Exploring the Vulnerability of Branch Prediction Unit.
28 Oct 2023
The paper SoK: SGX.Fail: How Stuff Gets eXposed with Stephan van Schaik, Alex Seto, Thomas Yurek, Adam Batori, Bader AlBassam, Daniel Genkin, Andrew Miller, Eyal Ronen and Christina Garman will appear in IEEE SP 2024
25 Oct 2023
The paper iLeakage: Browser-based Timerless Speculative Execution Attacks on Apple Devices with Jason Kim, Stephan van Schaik and Daniel Genkin will appear in CCS 2023
24 Oct 2023
Congratulations to William Kosasih who completed a Master of Philosophy on Cache Attacks and Defenses
16 Oct 2023
The paper SledgeHammer: Amplifying Rowhammer via Bank-level Parallelism with Ingab Kang, Walter Wang, Jason Kim, Stephan van Schaik, Youssef Tobah, Daniel Genkin and Andrew Kwong will appear in USENIX Security 2024
2 Oct 2023
Cyber Today, the magazine of the Australian Information Security Association (AISA) has a piece on CryptOpt
28 Sep 2023
SigEVO has a piece on the 2024 Humies Award and on CryptOpt
10 Sep 2023
I will present a keynote titled No Bad Time for Cache Attacks at Indocrypt 2023
19 Jul 2023
Preprint available On Borrowed Time – Preventing Static Power Side-Channel Analysis, co-authored with Robert Dumitru and Andrew Wabnitz.
19 Jul 2023
Our work CryptOpt: Verified Compilation with Randomized Program Search for Cryptographic Primitives won the 2023 Humies Gold Award at GECCO 2023
19 Jun 2023
The paper Checking Passwords on Leaky Computers: A Side Channel Analysis of Chrome’s Password Leak Detection Protocol with Andrew Kwong, Walter Wang, Jason Kim, Jonathan Berger, Daniel Genkin, Eyal Ronen, Hovav Shacham and Riad Wahby will appear in USENIX Security 2023
24 May 2023
The paper Hot Pixels: Frequency, Power, and Temperature Attacks on GPUs and Arm SoCs with Hritvik Taneja, Jason Kim, Jie Jeff Xu, Stephan van Schaik and Daniel Genkin will appear in USENIX Security 2023
11 May 2023
CryptOpt: Verified Compilation with Randomized Program Search for Cryptographic Primitives will receive a Distinguished Paper Award at PLDI 2023.
27 Apr 2023
The paper CacheFX: A Framework for Evaluating Cache Security with Daniel Genkin, William Kosasih, Fangfei Liu, Anna Trikalinou and Thomas Unterluggauer will appear in AsiaCCS 2023
2 Apr 2023
The paper CryptOpt: Verified Compilation with Randomized Program Search for Cryptographic Primitives with Joel Kuepper, Andres Erbsen, Jason Gross, Owen Conoly, Chuyue Sun, Samuel Tian, David Wu, Adam Chlipala, Chitchanok Chuengsatiansup, Daniel Genkin and Markus Wagner will appear in PLDI 2023
1 Apr 2023
I am starting a new position at Ruhr University Bochum.
14 Feb 2023
The paper BunnyHop: Exploiting the Instruction Prefetcher with Zhiyuan Zhang, Mingtian Tao, Sioli O'Connell, Chitchanok Chuengsatiansup and Daniel Genkin will appear in USENIX Security 2023
27 Jan 2023
The paper Ultimate SLH: Taking Speculative Load Hardening to the Next Level with Zhiyuan Zhang, Gilles Barthe, Chitchanok Chuengsatiansup and Peter Schwabe will appear in USENIX Security 2023
17 Jan 2023
CryptOpt, and SGX.Fail accepted to RWC 2023.
11 Nov 2022
The paper The Gates of Time: Improving Cache Attacks with Transient Execution with Daniel Katzman, William Kosasih, Chitchanok Chuengsatiansup and Eyal Ronen will appear in USENIX Security 2023
2 Nov 2022
Published a new HotCRP-style conflicts generator.
26 Aug 2022
The paper HammerScope: Observing DRAM Power Consumption Using Rowhammer with Yaakov Cohen, Kevin Sam Tharayil, Arie Haenel, Daniel Genkin, Angelos D. Keromytis and Yossi Oren will appear in CCS 2022
3 Aug 2022
The source code for CryptOpt is now available.
31 Jul 2022
I will present a keynote titled Side Channels and the Art of Recovering Secrets from your Microarchitecture at DFRSW-APAC 2022
15 Jul 2022
The paper The Impostor Among US(B): Off Path Injection Attacks on USB Communications with Robert Dumitru, Daniel Genkin and Andrew Wabnitz will appear in USENIX Security 2023
24 Jun 2022
The paper Spectre Declassified: Reading from the Right Place at the Wrong Time with Basavesh Ammanaghatta Shivakumar, Jack Barnes, Gilles Barthe, Sunjay Cauligi, Chitchanok Chuengsatiansup, Daniel Genkin, Sioli O'Connell, Peter Schwabe and Rui Qi Sim will appear in IEEE SP 2023
31 May 2022
The paper Row, Row, Row Your Boat: How to Not Find Weak Keys in Pilsung with Chitchanok Chuengsatiansup, Eyal Ronen and Gregory G. Rose will appear in The Computer Journal
25 Apr 2022
The paper Opportunities for Genetic Improvement of Cryptographic Code with Chitchanok Chuengsatiansup and Markus Wagner will appear in GI@GECCO 2022
28 Feb 2022
I will serve on the PC of CFAIL 2022.
8 Feb 2022
The paper SoK: Design Tools for Side-Channel-Aware Implementations with Ileana Buhan, Lejla Batina and Patrick Schaumont will appear in AsiaCCS 2022
5 Feb 2022
I am co-chairing the program committee of SEED 2022 with Hsien-Hsin Sean Lee.
1 Feb 2022
I will serve on the PC of ACISP 2022.
27 Jan 2022
Preprint available CacheFX: A Framework for Evaluating Cache Security, co-authored with Daniel Genkin, William Kosasih, Fangfei Liu, Anna Trikalinou, and Thomas Unterluggauer
21 Jan 2022
I will serve as an associate chair on the program committee of IEEE S&P 2023.
4 Jan 2022
I will serve on the PC of CCS 2022.
31 Dec 2021
The paper DrawnApart: A Unique Device Identification Technique based on Remote GPU Fingerprinting with Tomer Laor, Naif Mehanna, Antonin Durey, Vitaly Dyadyuk, Pierre Laperdrix, Clémentine Maurice, Yossi Oren, Romain Rouvoy and Walter Rudametkin will appear in NDSS 2022
11 Nov 2021
The paper Side-Channeling the Kalyna Key Expansion with Chitchanok Chuengsatiansup, Daniel Genkin and Zhiyuan Zhang will appear in CT-RSA 2022
5 Nov 2021
The paper RSA Key Recovery from Digit Equivalence Information with Chitchanok Chuengsatiansup, Andrew Feutrill and Rui Qi Sim will appear in ACNS 2022
22 Sep 2021
Added a copy of my PhD thesis because everyone should read it.
19 Sep 2021
Received the certificate for the NSA Best Scientific Cybersecurity Paper Competition 2020
5 Sep 2021
The paper Rosita++: Automatic Higher-Order Leakage Elimination from Cryptographic Code with Madura A. Shelton, Łukasz Chmielewski, Niels Samwel, Lejla Batina and Markus Wagner will appear in CCS 2021
11 Aug 2021
The paper Spook.js: Attacking Chrome Strict Site Isolation via Speculative Execution with Ayush Agarwal, Sioli O'Connell, Jason Kim, Shaked Yehezkel, Daniel Genkin and Eyal Ronen will appear in IEEE SP 2022
15 Jun 2021
The paper Row, Row, Row Your Boat: How to Not Find Weak Keys in Pilsung with Chitchanok Chuengsatiansup, Eyal Ronen and Gregory G. Rose will appear in CFail 2021
28 May 2021
I will serve on the PC of USENIX Security 2022.
7 May 2021
I will serve on the PCs of ACSAC 2021 and SEED 2021
19 Apr 2021
Preprint available , co-authored with Ileana Buhan, Lejla Batina, and Patrick Schaumont
17 Apr 2021
I will serve on the PC of CARDIS 2021.
30 Mar 2021
I will serve on the PC of IEEE S&P 2022.
17 Feb 2021
I will serve on the PC of DRAMSec 2021.
31 Jan 2021
The paper Nonce@Once: A Single-Trace EM Side Channel Attack on Several Constant-Time Elliptic Curve Implementations in Mobile Platforms with Monjur Alam, Baki Yilmaz, Frank Werner, Niels Samwel, Alenka Zajic, Daniel Genkin and Milos Prvulovic will appear in Euro S&P 2021
14 Jan 2021
The recording of our Real World Crypto presentations on Rosita and CacheOut is available here.
12 Jan 2021
The recording of our Real World Crypto presentation on LadderLeak is available here.
8 Dec 2020
The paper Prime+Probe 1, JavaScript 0: Overcoming Browser-based Side-Channel Defenses with Anatoly Shusterman, Ayush Agarwal, Sioli O'Connell, Daniel Genkin and Yossi Oren will appear in USENIX Security 2021
8 Dec 2020
The paper Security Architecture Framework for Enterprises with Michelle Graham, Katrina Falkner and Claudia Szabo will appear in Enterprise Information Systems
7 Dec 2020
I participated in an episode of the Discovery Pod.
21 Nov 2020
The paper CacheOut: Leaking Data on Intel CPUs via Cache Evictions with Stephan van Schaik, Marina Minkin, Andrew Kwong and Daniel Genkin will appear in IEEE SP 2021
17 Nov 2020
LadderLeak discussed on Cryptography.FM.
13 Nov 2020
Successful Discovery Project with Chitchanok Chuengsatiansup, Markus Wagner, Jason Xue, and Lejla Batina.
4 Nov 2020
The paper Whack-a-Meltdown: Microarchitectural Security Games with Daniel Genkin will appear in IEEE S&P Magazine
2 Nov 2020
CacheOut, LadderLeak, and Rosita accepted to RWC 2021.
30 Oct 2020
I will serve on the program committee of ACISP 2021
27 Oct 2020
I am participating in a panel on Recent trends in Crypto at ECC 2020
23 Oct 2020
The paper Rosita: Towards Automatic Elimination of Power-Analysis Leakage in Ciphers with Madura A. Shelton, Niels Samwel, Lejla Batina, Francesco Regazzoni and Markus Wagner will appear in NDSS 2021
21 Oct 2020
Our project 'Intelligent Technologies for Smart Cryptography', with Chitchanok Chuengsatiansup, Markus Wagner, and Jason Xue, has been awarded ECMS Seed Funding.
7 Oct 2020
I will serve on the PC of ESORICS 2021.
26 Sep 2020
Added submission history page.
17 Aug 2020
I am humbled and honoured to be named as a recipient of the SA 2020 Tall Poppy Award.
31 Jul 2020
I will present a keynote titled Whack-a-Meltdown: a Micro-Architectural Game at ATIS 2020
30 Jul 2020
The paper LadderLeak: Breaking ECDSA With Less Than One Bit Of Nonce Leakage with Diego F. Aranha, Felipe Rodrigues Novaes, Akira Takahashi and Mehdi Tibouchi will appear in CCS 2020
8 Jul 2020
The paper PThammer: Cross-User-Kernel-Boundary Rowhammer through Implicit Accesses with Zhi Zhang, Yueqiang Cheng, Dongxi Liu, Surya Nepal and Zhi Wang will appear in MICRO 2020