34 citations · 94 across the 13 of their papers we have counts for
13 papers
MIPSBLEED: Uncovering Microarchitectural Timing Leaks in Pervasive Embedded Processors
Ahmed Najeeb, Billy Bob Brumley
Despite their age, MIPS processors remain deeply embedded in routers, industrial controllers, and IoT systems, yet their security against modern side-channel attacks has received l…
SoK: The Constant Time Model
Billy Bob Brumley
Constant time programming patterns is the primary defense against timing attacks on cryptographic implementations, yet what "constant time" means varies across academia and industr…
U Can Touch This! Microarchitectural Timing Attacks via Machine Clears
Billy Bob Brumley
Microarchitectural timing attacks exploit subtle timing variations caused by hardware behaviors to leak sensitive information. In this paper, we introduce MCHammer, a novel side-ch…
Investigating child sexual abuse material availability, searches, and users on the anonymous Tor network for a public health intervention strategy
Juha Nurmi, Arttu Paju, Billy Bob Brumley +6
Tor is widely used for staying anonymous online and accessing onion websites; unfortunately, Tor is popular for distributing and viewing illicit child sexual abuse material (CSAM).…
Malware Finances and Operations: a Data-Driven Study of the Value Chain for Infections and Compromised Access
Juha Nurmi, Mikko Niemelä, Billy Bob Brumley
We investigate the criminal market dynamics of infostealer malware and publish three evidence datasets on malware infections and trade. We justify the value chain between illicit e…
SoK: A Systematic Review of TEE Usage for Developing Trusted Applications
Arttu Paju, Muhammad Owais Javed, Juha Nurmi +3
Trusted Execution Environments (TEEs) are a feature of modern central processing units (CPUs) that aim to provide a high assurance, isolated environment in which to run workloads t…
OpenSSLNTRU: Faster post-quantum TLS key exchange
Daniel J. Bernstein, Billy Bob Brumley, Ming-Shing Chen +1
Google's CECPQ1 experiment in 2016 integrated a post-quantum key-exchange algorithm, newhope1024, into TLS 1.2. The Google-Cloudflare CECPQ2 experiment in 2019 integrated a more ef…
Attestation Waves: Platform Trust via Remote Power Analysis
Ignacio M. Delgado-Lozano, Macarena C. Martínez-Rodríguez, Alexandros Bakas +2
Attestation is a strong tool to verify the integrity of an untrusted system. However, in recent years, different attacks have appeared that are able to mislead the attestation proc…
HyperDegrade: From GHz to MHz Effective CPU Frequencies
Alejandro Cabrera Aldaya, Billy Bob Brumley
Performance degradation techniques are an important complement to side-channel attacks. In this work, we propose HyperDegrade -- a combination of previous approaches and the use of…
Déjà Vu: Side-Channel Analysis of Mozilla's NSS
Sohaib ul Hassan, Iaroslav Gridin, Ignacio M. Delgado-Lozano +4
Recent work on Side Channel Analysis (SCA) targets old, well-known vulnerabilities, even previously exploited, reported, and patched in high-profile cryptography libraries. Neverth…
Set It and Forget It! Turnkey ECC for Instant Integration
Dmitry Belyavsky, Billy Bob Brumley, Jesús-Javier Chi-Domínguez +2
Historically, Elliptic Curve Cryptography (ECC) is an active field of applied cryptography where recent focus is on high speed, constant time, and formally verified implementations…
Online Template Attacks: Revisited
Alejandro Cabrera Aldaya, Billy Bob Brumley
An online template attack (OTA) is a powerful technique previously used to attack elliptic curve scalar multiplication algorithms. This attack has only been analyzed in the realm o…
Certified Side Channels
Cesar Pereida García, Sohaib ul Hassan, Nicola Tuveri +3
We demonstrate that the format in which private keys are persisted impacts Side Channel Analysis (SCA) security. Surveying several widely deployed software libraries, we investigat…