activity
20182022
most citedIodine: Verifying Constant-Time Execution of Hardware

16 citations · 37 across the 5 of their papers we have counts for

collaborators

9 papers

cs.CR2022

Blocked or Broken? Automatically Detecting When Privacy Interventions Break Websites

Michael Smith, Peter Snyder, Moritz Haller +3

A core problem in the development and maintenance of crowd-sourced filter lists is that their maintainers cannot confidently predict whether (and where) a new filter list rule will…

cs.CR2021

Solver-Aided Constant-Time Circuit Verification

Rami Gokhan Kici, Klaus v. Gleissenthall, Deian Stefan +1

We present Xenon, a solver-aided method for formally verifying that Verilog hardware executes in constant-time. Xenon scales to realistic hardware designs by drastically reducing t…

cs.CR202115 cited

Swivel: Hardening WebAssembly against Spectre

Shravan Narayan, Craig Disselkoen, Daniel Moghimi +8

We describe Swivel, a new compiler framework for hardening WebAssembly (Wasm) against Spectre attacks. Outside the browser, Wasm has become a popular lightweight, in-process sandbo…

cs.CR2020

Automatically Eliminating Speculative Leaks from Cryptographic Code with Blade

Marco Vassena, Craig Disselkoen, Klaus V. Gleissenthall +5

We introduce BLADE, a new approach to automatically and efficiently eliminate speculative leaks from cryptographic code. BLADE is built on the insight that to stop leaks via specul…

cs.CR2020

Retrofitting Fine Grain Isolation in the Firefox Renderer (Extended Version)

Shravan Narayan, Craig Disselkoen, Tal Garfinkel +5

Firefox and other major browsers rely on dozens of third-party libraries to render audio, video, images, and other content. These libraries are a frequent source of vulnerabilities…

cs.CR20196 cited

Gobi: WebAssembly as a Practical Path to Library Sandboxing

Shravan Narayan, Tal Garfinkel, Sorin Lerner +2

Software based fault isolation (SFI) is a powerful approach to reduce the impact of security vulnerabilities in large C/C++ applications like Firefox and Apache. Unfortunately, pra…