69 citations · 234 across the 12 of their papers we have counts for
12 papers
HPCCFA: Leveraging Hardware Performance Counters for Control Flow Attestation
Claudius Pott, Luca Wilke, Jan Wichelmann +1
Trusted Execution Environments (TEEs) allow the secure execution of code on remote systems without the need to trust their operators. They use static attestation as a central mecha…
Obelix: Mitigating Side-Channels Through Dynamic Obfuscation
Jan Wichelmann, Anja Rabich, Anna P"atschke +1
Trusted execution environments (TEEs) offer hardware-assisted means to protect code and data. However, as shown in numerous results over the years, attackers can use side-channels…
Zebrafix: Mitigating Memory-Centric Side-Channel Leakage via Interleaving
Anna Pätschke, Jan Wichelmann, Thomas Eisenbarth
Constant-time code has become the de-facto standard for secure cryptographic implementations. However, some memory-based leakage classes such as ciphertext side-channels and silent…
SEV-Step: A Single-Stepping Framework for AMD-SEV
Luca Wilke, Jan Wichelmann, Anja Rabich +1
The ever increasing popularity and availability of Trusted Execution Environments (TEEs) had a stark influence on microarchitectural attack research in academia, as their strong at…
MAMBO-V: Dynamic Side-Channel Leakage Analysis on RISC-V
Jan Wichelmann, Christopher Peredy, Florian Sieck +2
RISC-V is an emerging technology, with applications ranging from embedded devices to high-performance servers. Therefore, more and more security-critical workloads will be conducte…
Cipherfix: Mitigating Ciphertext Side-Channel Attacks in Software
Jan Wichelmann, Anna Pätschke, Luca Wilke +1
Trusted execution environments (TEEs) provide an environment for running workloads in the cloud without having to trust cloud service providers, by offering additional hardware-ass…
Microwalk-CI: Practical Side-Channel Analysis for JavaScript Applications
Jan Wichelmann, Florian Sieck, Anna Pätschke +1
Secret-dependent timing behavior in cryptographic implementations has resulted in exploitable vulnerabilities, undermining their security. Over the years, numerous tools to automat…
Util::Lookup: Exploiting key decoding in cryptographic libraries
Florian Sieck, Sebastian Berndt, Jan Wichelmann +1
Implementations of cryptographic libraries have been scrutinized for secret-dependent execution behavior exploitable by microarchitectural side-channel attacks. To prevent unintend…
undeSErVed trust: Exploiting Permutation-Agnostic Remote Attestation
Luca Wilke, Jan Wichelmann, Florian Sieck +1
The ongoing trend of moving data and computation to the cloud is met with concerns regarding privacy and protection of intellectual property. Cloud Service Providers (CSP) must be…
SEVurity: No Security Without Integrity -- Breaking Integrity-Free Memory Encryption with Minimal Assumptions
Luca Wilke, Jan Wichelmann, Mathias Morbitzer +1
One reason for not adopting cloud services is the required trust in the cloud provider: As they control the hypervisor, any data processed in the system is accessible to them. Full…
MicroWalk: A Framework for Finding Side Channels in Binaries
Jan Wichelmann, Ahmad Moghimi, Thomas Eisenbarth +1
Microarchitectural side channels expose unprotected software to information leakage attacks where a software adversary is able to track runtime behavior of a benign process and ste…
MemJam: A False Dependency Attack against Constant-Time Crypto Implementations
Ahmad Moghimi, Thomas Eisenbarth, Berk Sunar
Cache attacks exploit memory access patterns of cryptographic implementations. Constant-Time implementation techniques have become an indispensable tool in fighting cache timing at…