Yuval Yarom

"Make Sure DSA Signing Exponentiations Really are Constant-Time"

2016

TLS and SSH are two of the most commonly used protocols for securing Internet traffic. Many of the implementations of these protocols rely on the cryptographic primitives provided in the OpenSSL library. In this work …

Prime+Probe 1, JavaScript 0: Overcoming Browser-based Side-Channel Defenses

2021 · Adelaide Research & Scholarship (AR&S) (University of Adelaide)

The eternal war in cache has reached browsers, with multiple cache-based side-channel attacks and countermeasures being suggested. A common approach for countermeasures is to disable or restrict JavaScript features deemed essential for carrying out attacks. …

CNN architecture extraction on edge GPU

2024 · arXiv (Cornell University)

Neural networks have become popular due to their versatility and state-of-the-art results in many applications, such as image classification, natural language processing, speech recognition, forecasting, etc. These applications are also used in resource-constrained environments such …

Elephants Do Not Forget: Differential Privacy with State Continuity for Privacy Budget

2024 · arXiv (Cornell University)

Current implementations of differentially-private (DP) systems either lack support to track the global privacy budget consumed on a dataset, or fail to faithfully maintain the state continuity of this budget. We show that failure to …