Publications

(2025). BadRAM: Practical Memory Aliasing Attacks on Trusted Execution Environments. to appear at IEEE S&P 2025.

Website

(2024). TDXdown: Single-Stepping and Instruction Counting Attacks against Intel TDX. to appear at ACM CCS 2024.

PDF Code Slides DOI Website

(2024). SNPGuard: Remote Attestation of SEV-SNP VMs Using Open Source Tools. 2024 IEEE European Symposium on Security and Privacy Workshops (Euro S&P).

PDF Cite Code URL

(2024). SEV-Step A Single-Stepping Framework for AMD-SEV. IACR Trans. Cryptogr. Hardw. Embed. Syst..

PDF Cite Code DOI URL

(2023). Cipherfix: Mitigating Ciphertext Side-Channel Attacks in Software. 32nd USENIX Security Symposium, USENIX Security 2023, Anaheim, CA, USA, August 9-11, 2023.

PDF Cite Code Slides Video URL

(2022). A Systematic Look at Ciphertext Side Channels on AMD SEV-SNP. 43rd IEEE Symposium on Security and Privacy, SP 2022, San Francisco, CA, USA, May 22-26, 2022.

Cite Code Slides Video DOI URL

(2021). undeSErVed trust: Exploiting Permutation-Agnostic Remote Attestation. IEEE Security and Privacy Workshops, SP Workshops 2021, San Francisco, CA, USA, May 27, 2021.

Cite Code Slides Video DOI URL

(2021). Side-Channel Protections for Picnic Signatures. IACR Trans. Cryptogr. Hardw. Embed. Syst..

PDF Cite Code Video DOI URL

(2020). SNI-in-the-head: Protecting MPC-in-the-head Protocols against Side-channel Analysis. CCS ‘20: 2020 ACM SIGSAC Conference on Computer and Communications Security, Virtual Event, USA, November 9-13, 2020.

Cite Video DOI URL

(2020). SEVurity: No Security Without Integrity : Breaking Integrity-Free Memory Encryption with Minimal Assumptions. 2020 IEEE Symposium on Security and Privacy, SP 2020, San Francisco, CA, USA, May 18-21, 2020.

Cite DOI URL Paper Website