Yuval Yarom
Publications Supervision Blog
Publications
View: by type; submission history; conflicts generator;
2024
Pixel Thief: Exploiting SVG Filter Leakage in Firefox and Chrome
Sioli O'Connell, Lishay Aben Sour, Ron Magen, Daniel Genkin, Yossi Oren, Hovav Shacham and Yuval Yarom
USENIX Security, Aug 2024.
SledgeHammer: Amplifying Rowhammer via Bank-level Parallelism
Ingab Kang, Walter Wang, Jason Kim, Stephan van Schaik, Youssef Tobah, Daniel Genkin, Andrew Kwong and Yuval Yarom
USENIX Security, Aug 2024.
SoK: SGX.Fail: How Stuff Gets eXposed
Stephan van Schaik, Alex Seto, Thomas Yurek, Adam Batori, Bader AlBassam, Daniel Genkin, Andrew Miller, Eyal Ronen, Yuval Yarom and Christina Garman
IEEE SP, San Francisco, CA, USA, May 2024.
2023
iLeakage: Browser-based Timerless Speculative Execution Attacks on Apple Devices
Jason Kim, Stephan van Schaik, Daniel Genkin and Yuval Yarom
CCS, Nov 2023.
Leaky McEliece: Secret Key Recovery From Highly Erroneous Side-Channel Information
Marcus Brinkmann, Chitchanok Chuengsatiansup, Alexander May, Julian Nowakowski and Yuval Yarom
ePrint 2023/1536, Oct 2023.
BunnyHop: Exploiting the Instruction Prefetcher
Zhiyuan Zhang, Mingtian Tao, Sioli O'Connell, Chitchanok Chuengsatiansup, Daniel Genkin and Yuval Yarom
USENIX Security, pp. 7321–7337, Anaheim, CA, USA, Aug 2023.
Checking Passwords on Leaky Computers: A Side Channel Analysis of Chrome’s Password Leak Detection Protocol
Andrew Kwong, Walter Wang, Jason Kim, Jonathan Berger, Daniel Genkin, Eyal Ronen, Hovav Shacham, Riad Wahby and Yuval Yarom
USENIX Security, pp. 7107–7124, Anaheim, CA, USA, Aug 2023.
The Gates of Time: Improving Cache Attacks with Transient Execution
Daniel Katzman, William Kosasih, Chitchanok Chuengsatiansup, Eyal Ronen and Yuval Yarom
USENIX Security, Anaheim, CA, USA, Aug 2023.
Hot Pixels: Frequency, Power, and Temperature Attacks on GPUs and Arm SoCs
Hritvik Taneja, Jason Kim, Jie Jeff Xu, Stephan van Schaik, Daniel Genkin and Yuval Yarom
USENIX Security, pp. 6275–6292, Anaheim, CA, USA, Aug 2023.
The Impostor Among US(B): Off Path Injection Attacks on USB Communications
Robert Dumitru, Daniel Genkin, Andrew Wabnitz and Yuval Yarom
USENIX Security, pp. 5863–5880, Anaheim, CA, USA, Aug 2023.
Ultimate SLH: Taking Speculative Load Hardening to the Next Level
Zhiyuan Zhang, Gilles Barthe, Chitchanok Chuengsatiansup, Peter Schwabe and Yuval Yarom
USENIX Security, pp. 7125–7142, Anaheim, CA, USA, Aug 2023.
On Borrowed Time – Preventing Static Power Side-Channel Analysis
Robert Dumitru, Andrew Wabnitz and Yuval Yarom
arXiv 2307.09001, Jul 2023.
CacheFX: A Framework for Evaluating Cache Security
Daniel Genkin, William Kosasih, Fangfei Liu, Anna Trikalinou, Thomas Unterluggauer and Yuval Yarom
AsiaCCS, Jul 2023.
CryptOpt: Verified Compilation with Randomized Program Search for Cryptographic Primitives
Joel Kuepper, Andres Erbsen, Jason Gross, Owen Conoly, Chuyue Sun, Samuel Tian, David Wu, Adam Chlipala, Chitchanok Chuengsatiansup, Daniel Genkin, Markus Wagner and Yuval Yarom
PLDI, Jun 2023.
Distinguished Paper and Humies Gold Award
Spectre Declassified: Reading from the Right Place at the Wrong Time
Basavesh Ammanaghatta Shivakumar, Jack Barnes, Gilles Barthe, Sunjay Cauligi, Chitchanok Chuengsatiansup, Daniel Genkin, Sioli O'Connell, Peter Schwabe, Rui Qi Sim and Yuval Yarom
IEEE SP, May 2023.
CryptOpt: Automatic Optimization of Straightline Code
Joel Kuepper, David Wu, Andres Erbsen, Jason Gross, Owen Conoly, Chuyue Sun, Samuel Tian, Adam Chlipala, Chitchanok Chuengsatiansup, Daniel Genkin, Markus Wagner and Yuval Yarom
ICSE (Companion), May 2023.
2022
Row, Row, Row Your Boat: How to Not Find Weak Keys in Pilsung
Chitchanok Chuengsatiansup, Eyal Ronen, Gregory G. Rose and Yuval Yarom
The Computer Journal, 2022.
HammerScope: Observing DRAM Power Consumption Using Rowhammer
Yaakov Cohen, Kevin Sam Tharayil, Arie Haenel, Daniel Genkin, Angelos D. Keromytis, Yossi Oren and Yuval Yarom
CCS, Los Angeles, CA, USA, Nov 2022.
Opportunities for Genetic Improvement of Cryptographic Code
Chitchanok Chuengsatiansup, Markus Wagner and Yuval Yarom
GI@GECCO, pp. 1928–1929, Jul 2022.
RSA Key Recovery from Digit Equivalence Information
Chitchanok Chuengsatiansup, Andrew Feutrill, Rui Qi Sim and Yuval Yarom
ACNS, pp. 193–211, Jun 2022.
SoK: Design Tools for Side-Channel-Aware Implementations
Ileana Buhan, Lejla Batina, Yuval Yarom and Patrick Schaumont
AsiaCCS, May 2022.
Spook.js: Attacking Chrome Strict Site Isolation via Speculative Execution
Ayush Agarwal, Sioli O'Connell, Jason Kim, Shaked Yehezkel, Daniel Genkin, Eyal Ronen and Yuval Yarom
IEEE SP, May 2022.
DrawnApart: A Unique Device Identification Technique based on Remote GPU Fingerprinting
Tomer Laor, Naif Mehanna, Antonin Durey, Vitaly Dyadyuk, Pierre Laperdrix, Clémentine Maurice, Yossi Oren, Romain Rouvoy, Walter Rudametkin and Yuval Yarom
NDSS, Feb 2022.
Side-Channeling the Kalyna Key Expansion
Chitchanok Chuengsatiansup, Daniel Genkin, Yuval Yarom and Zhiyuan Zhang
CT-RSA, pp. 272–296, Feb 2022.
2021
Rosita++: Automatic Higher-Order Leakage Elimination from Cryptographic Code
Madura A. Shelton, Łukasz Chmielewski, Niels Samwel, Lejla Batina, Markus Wagner and Yuval Yarom
CCS, pp. 685–699, Nov 2021.
Website Fingerprinting Through the Cache Occupancy Channel and its Real World Practicality
Anatoly Shusterman, Zohar Avraham, Eliezer Croitoru, Yarden Haskal, Lachlan Kang, Dvir Levi, Yosef Meltser, Prateek Mittal, Yossi Oren and Yuval Yarom
IEEE TDSC 18(5), pp. 2042–2060, Sep 2021.
Nonce@Once: A Single-Trace EM Side Channel Attack on Several Constant-Time Elliptic Curve Implementations in Mobile Platforms
Monjur Alam, Baki Yilmaz, Frank Werner, Niels Samwel, Alenka Zajic, Daniel Genkin, Yuval Yarom and Milos Prvulovic
Euro S&P, pp. 507–522, Sep 2021.
Row, Row, Row Your Boat: How to Not Find Weak Keys in Pilsung
Chitchanok Chuengsatiansup, Eyal Ronen, Gregory G. Rose and Yuval Yarom
CFail, Aug 2021.
Prime+Probe 1, JavaScript 0: Overcoming Browser-based Side-Channel Defenses
Anatoly Shusterman, Ayush Agarwal, Sioli O'Connell, Daniel Genkin, Yossi Oren and Yuval Yarom
USENIX Security, Aug 2021.
CacheOut: Leaking Data on Intel CPUs via Cache Evictions
Stephan van Schaik, Marina Minkin, Andrew Kwong, Daniel Genkin and Yuval Yarom
IEEE SP, Virtual, May 2021.
Security Architecture Framework for Enterprises
Michelle Graham, Katrina Falkner, Claudia Szabo and Yuval Yarom
Enterprise Information Systems, pp. 883–904, May 2021.
Rosita: Towards Automatic Elimination of Power-Analysis Leakage in Ciphers
Madura A. Shelton, Niels Samwel, Lejla Batina, Francesco Regazzoni, Markus Wagner and Yuval Yarom
NDSS, Feb 2021.
Whack-a-Meltdown: Microarchitectural Security Games
Daniel Genkin and Yuval Yarom
IEEE S&P Magazine 19(1), pp. 95–98, Jan 2021.
2020
A Queueing Solution to Reduce Delay in Processing of Disclosed Vulnerabilities
Andrew Feutrill, Matthew Roughan, Yuval Yarom and Joshua Ross
TPS-ISA, pp. 1–11, Dec 2020.
LadderLeak: Breaking ECDSA With Less Than One Bit Of Nonce Leakage
Diego F. Aranha, Felipe Rodrigues Novaes, Akira Takahashi, Mehdi Tibouchi and Yuval Yarom
CCS, pp. 225–242, Nov 2020.
PThammer: Cross-User-Kernel-Boundary Rowhammer through Implicit Accesses
Zhi Zhang, Yueqiang Cheng, Dongxi Liu, Surya Nepal, Zhi Wang and Yuval Yarom
MICRO, pp. 28–41, Oct 2020.
Spectre Attacks: Exploiting Speculative Execution
Paul Kocher, Jann Horn, Anders Fogh, Daniel Genkin, Daniel Gruss, Werner Haas, Mike Hamburg, Moritz Lipp, Stefan Mangard, Thomas Prescher, Michael Schwarz and Yuval Yarom
Communications of the ACM 63(7), pp. 93–101, Jul 2020.
Meltdown: Reading Kernel Memory from User Space
Moritz Lipp, Michael Schwarz, Daniel Gruss, Thomas Prescher, Werner Haas, Jann Horn, Stefan Mangard, Paul Kocher, Daniel Genkin, Yuval Yarom, Mike Hamburg and Raoul Strackx
Communications of the ACM 63(6), pp. 45–56, Jun 2020.
Pseudorandom Black Swans: Cache Attacks on CTR_DRBG
Shaanan Cohney, Andrew Kwong, Shachar Paz, Daniel Genkin, Nadia Heninger, Eyal Ronen and Yuval Yarom
IEEE SP, pp. 875–892, May 2020.
RAMBleed: Reading Bits in Memory Without Accessing Them
Andrew Kwong, Daniel Genkin, Daniel Gruss and Yuval Yarom
IEEE SP, pp. 310–326, May 2020.
LVI: Hijacking Transient Execution through Microarchitectural Load Value Injection
Jo Van Bulck, Daniel Moghimi, Michael Schwarz, Moritz Lipp, Marina Minkin, Daniel Genkin, Yuval Yarom, Berk Sunar, Daniel Gruss and Frank Piessens
IEEE SP, pp. 1452–1470, May 2020.
Enterprise Security Architecture: Mythology or Methodology?
Michelle McClintock, Katrina Falkner, Claudia Szabo and Yuval Yarom
ICEIS, pp. 679–689, May 2020.
Best student paper award
2019
Cache vs. Key-Dependency: Side Channeling an Implementation of Pilsung
Daniel Genkin, Romain Poussier, Rui Qi Sim, Yuval Yarom and Yuanjing Zhao
TCHES 2020(1), pp. 231–255, Nov 2019.
Fallout: Leaking Data on Meltdown-resistant CPUs
Claudio Canella, Daniel Genkin, Lukas Giner, Daniel Gruss, Moritz Lipp, Marina Minkin, Daniel Moghimi, Frank Piessens, Michael Schwarz, Berk Sunar, Jo Van Bulck and Yuval Yarom
CCS, pp. 769–784, London, United Kingdom, Nov 2019.
Robust Website Fingerprinting Through the Cache Occupancy Channel
Anatoly Shusterman, Lachlan Kang, Yarden Haskal, Yosef Meltser, Prateek Mittal, Yossi Oren and Yuval Yarom
USENIX Security, pp. 639–656, Santa Clara, CA, USA, Aug 2019.
The 9 Lives of Bleichenbacher's CAT: New Cache ATtacks on TLS Implementations
Eyal Ronen, Robert Gillham, Daniel Genkin, Adi Shamir, David Wong and Yuval Yarom
IEEE SP, pp. 966–983, San Francisco, CA, USA, May 2019.
Spectre Attacks: Exploiting Speculative Execution
Paul Kocher, Jann Horn, Anders Fogh, Daniel Genkin, Daniel Gruss, Werner Haas, Mike Hamburg, Moritz Lipp, Stefan Mangard, Thomas Prescher, Michael Schwarz and Yuval Yarom
IEEE SP, pp. 19–37, San Francisco, CA, USA, May 2019.
Distinguished paper award and NSA Best Scientific Cybersecurity Paper
Breaking Virtual Memory Protection and the SGX Ecosystem with Foreshadow
Jo Van Bulck, Marina Minkin, Ofir Weisse, Daniel Genkin, Baris Kasikci, Frank Piessens, Mark Silberstein, Thomas F. Wenisch, Yuval Yarom and Raoul Strackx
IEEE Micro 39(3), pp. 66–74, May 2019.
Time Protection: the Missing OS Abstraction
Qian Ge, Yuval Yarom, Tom Chothia and Gernot Heiser
EuroSys, pp. 1:1–1:17, Dresden, Germany, Mar 2019.
Best paper award
2018
The Effect of Common Vulnerability Scoring System Metrics on Vulnerability Exploit Delay
Andrew Feutrill, Dinesha Ranathunga, Yuval Yarom and Matthew Roughan
CANDAR, pp. 1–10, Hida Takayama, Japan, Nov 2018.
Meltdown: Reading Kernel Memory from User Space
Moritz Lipp, Michael Schwarz, Daniel Gruss, Thomas Prescher, Werner Haas, Anders Fogh, Jann Horn, Stefan Mangard, Paul Kocher, Daniel Genkin, Yuval Yarom and Mike Hamburg
USENIX Security, pp. 973–990, Baltimore, MD, USA, Aug 2018.
NSA Best Scientific Cybersecurity Paper Honorable Mention
Foreshadow: Extracting the Keys to the IntelSGX Kingdom with Transient Out-of-Order Execution
Jo Van Bulck, Marina Minkin, Ofir Weisse, Daniel Genkin, Baris Kasikci, Frank Piessens, Mark Silberstein, Thomas F. Wenisch, Yuval Yarom and Raoul Strackx
USENIX Security, pp. 991–1008, Baltimore, MD, USA, Aug 2018.
IEEE Micro Top Pick
No Security Without Time protection: We Need a New hardware Software Contract
Qian Ge, Yuval Yarom and Gernot Heiser
APSys, Jeju Island, Korea, Aug 2018.
Best paper award
Foreshadow-NG: Breaking the Virtual Memory Abstraction with Transient Out-of-Order Execution
Ofir Weisse, Jo Van Bulck, Marina Minkin, Daniel Genkin, Baris Kasikci, Frank Piessens, Mark Silberstein, Raoul Strackx, Thomas F. Wenisch and Yuval Yarom
Online, Aug 2018.
Drive-by Key-Extraction Cache Attacks from Portable Code
Daniel Genkin, Lev Pachmanov, Eran Tromer and Yuval Yarom
ACNS, pp. 83–102, Leuven, Belgium, Jul 2018.
Another Flip in the Wall of Rowhammer Defenses
Daniel Gruss, Moritz Lipp, Michael Schwarz, Daniel Genkin, Jonas Juffinger, Sioli O'Connell, Wolfgang Schoechl and Yuval Yarom
IEEE SP, pp. 489–505, San Francisco, CA, USA, May 2018.
CacheQuote: Efficiently Recovering Long-term Secrets of SGX EPID via Cache Attacks
Fergus Dall, Gabrielle De Micheli, Thomas Eisenbarth, Daniel Genkin, Nadia Heninger, Ahmad Moghimi and Yuval Yarom
TCHES 2018(2), pp. 171–191, May 2018.
A Survey of Microarchitectural Timing Attacks and Countermeasures on Contemporary Hardware
Qian Ge, Yuval Yarom, David Cock and Gernot Heiser
JCEN 8(1), pp. 1–27, Apr 2018.
2017
May the Fourth Be With You: A Microarchitectural Side Channel Attack on Several Real-World Applications of Curve25519
Daniel Genkin, Luke Valenta and Yuval Yarom
CCS, pp. 845–858, Dallas, TX, US, Oct 2017.
To BLISS-B or not to be — Attacking StrongSwan's Implementation of Post-Quantum Signatures
Peter Pessl, Leon Groot Bruinderink and Yuval Yarom
CCS, pp. 1843–1855, Dallas, TX, USA, Oct 2017.
Sliding Right Into Disaster: Left-to-Right Sliding Windows Leak
Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal and Yuval Yarom
CHES, pp. 555–576, Taipei, Taiwan, Sep 2017.
USB Snooping Made Easy: Crosstalk Leakage Attacks on USB Hubs
Yang Su, Daniel Genkin, Damith C. Ranasinghe and Yuval Yarom
USENIX Security, pp. 1145–1161, Vancouver, BC, Canada, Aug 2017.
CacheBleed: A Timing Attack on OpenSSL Constant Time RSA
Yuval Yarom, Daniel Genkin and Nadia Heninger
JCEN 7(2), pp. 99–112, Jun 2017.
Modifying an Enciphering Scheme after Deployment
Paul Grubbs, Thomas Ristenpart and Yuval Yarom
EuroCrypt, pp. 499–527, Paris, France, Apr 2017.
Replacing Sanger with Next Generation Sequencing to improve coverage and quality of reference DNA barcodes for plants
Mike J. Wilkinson, Claudia Szabo, Caroline S. Ford, Yuval Yarom, Adam E. Croxford, Amanda Camp and Paul Gooding
Scientific Reports 7(46040), Apr 2017.
2016
Amplifying Side Channels Through Performance Degradation
Thomas Allan, Billy Bob Brumley, Katrina Falkner, Joop van de Pol and Yuval Yarom
ACSAC, pp. 422–435, Los Angeles, CA, USA, Dec 2016.
“Make Sure DSA Signing Exponentiations Really are Constant-Time”
Cesar Pereida García, Billy Bob Brumley and Yuval Yarom
CCS, pp. 1639–1650, Vienna, Austria, Oct 2016.
ECDSA Key Extraction from Mobile Devices via Nonintrusive Physical Side Channels
Daniel Genkin, Lev Pachmanov, Itamar Pipman, Eran Tromer and Yuval Yarom
CCS, pp. 1626–1638, Vienna, Austria, Oct 2016.
CacheBleed: A Timing Attack on OpenSSL Constant Time RSA
Yuval Yarom, Daniel Genkin and Nadia Heninger
CHES, pp. 346–367, Santa Barbabra, CA, US, Aug 2016.
Flush, Gauss, and Reload — A Cache Attack on the BLISS Lattice-Based Signature Scheme
Leon Groot Bruinderink, Andreas Hülsing, Tanja Lange and Yuval Yarom
CHES, pp. 323–345, Santa Barbabra, CA, USA, Aug 2016.
CATalyst: Defeating Last-Level Cache Side Channel Attacks in Cloud Computing
Fangfei Liu, Qian Ge, Yuval Yarom, Frank Mckeen, Carlos Rozas, Gernot Heiser and Ruby B. Lee
HPCA, pp. 406–418, Barcelona, Spain, Mar 2016.
2015
Exploiting Transformations of the Galois Configuration to Improve Guess-and-Determine Attacks on NFSRs
Gefei Li, Yuval Yarom and Damith C. Ranasinghe
ePrint 2015/1045, Oct 2015.
Mapping the Intel Last-Level Cache
Yuval Yarom, Qian Ge, Fangfei Liu, Ruby B. Lee and Gernot Heiser
ePrint 2015/905, Sep 2015.
Evaluation and Cryptanalysis of the Pandaka Lightweight Cipher
Yuval Yarom, Gefei Li and Damith C. Ranasinghe
ACNS, pp. 370–385, New York, NY, USA, Jun 2015.
Last-Level Cache Side-Channel Attacks are Practical
Fangfei Liu, Yuval Yarom, Qian Ge, Gernot Heiser and Ruby B. Lee
IEEE SP, pp. 605–622, San Jose, CA, USA, May 2015.
Just a Little Bit More
Joop van de Pol, Nigel P. Smart and Yuval Yarom
CT-RSA, pp. 3–21, San Francisco, CA, USA, Apr 2015.
2014
“Ooh Aah ... Just a Little Bit”: A Small Amount of Side Channel can go a Long Way
Naomi Benger, Joop van de Pol, Nigel P. Smart and Yuval Yarom
CHES, pp. 73–92, Busan, Korea, Sep 2014.
Flush+Reload: a High Resolution, Low Noise, L3 Cache Side-Channel Attack
Yuval Yarom and Katrina Falkner
USENIX Security, pp. 719–732, San Diego, CA, USA, Aug 2014.
Recovering OpenSSL ECDSA Nonces Using the Flush+Reload Cache Side-channel Attack
Yuval Yarom and Naomi Benger
ePrint 2014/140, Feb 2014.
2012
S-RVM: a Secure Design for a High-Performance Java Virtual Machine
Yuval Yarom, Katrina Falkner and David S. Munro
VMIL, Tuscon, AZ, USA, Oct 2012.
2008
Estimating Camera Overlap in Large and Growing Networks
Henry Detmold, Anton van den Hengel, Anthony Dick, Alex Cichowski, Rhys Hill, Ekim Kocadag, Yuval Yarom, Katrina Falkner and David S. Munro
ICDSC, pp. 1–10, Stanford University, CA, USA, Sep 2008.
2006
Application Objects in Jikes RVM—Separating the Wheat from the Chaff
Yuval Yarom
WOSSA, pp. 50–53, Victor Harbor, SA, Australia, Jan 2006.
1995
The NOW MOSIX and its Preemptive Process Migration Scheme
Amnon Barak, Oren Laden and Yuval Yarom
IEEE TCOS Bulletin 7(2), 1995.
1994
Warm Backup Using Snooping
Danny Dolev, Dalia Malkhi and Yuval Yarom
SDNE, pp. 60–65, Prague, Czech Republic, Jun 1994.