Hovav Shacham

Publication Activity (10 Years)

Years Active: 2001-2024
Publications (10 Years): 25

Top Topics

Oriented Programming

Graphical Passwords

Top Venues

USENIX Security Symposium

IEEE Symposium on Security and Privacy

Publications

Sioli O'Connell, Lishay Aben Sour, Ron Magen, Daniel Genkin, Yossi Oren, Hovav Shacham, Yuval Yarom
Pixel Thief: Exploiting SVG Filter Leakage in Firefox and Chrome. USENIX Security Symposium (2024)
Yingchen Wang, Riccardo Paccagnella, Elizabeth Tang He, Hovav Shacham, Christopher W. Fletcher, David Kohlbrenner
Hertzbleed: Turning Power Side-Channel Attacks Into Remote Timing Attacks on x86. IEEE Micro 43 (4) (2023)
Willy R. Vasquez, Stephen Checkoway, Hovav Shacham
The Most Dangerous Codec in the World: Finding and Exploiting Vulnerabilities in H.264 Decoders. USENIX Security Symposium (2023)
Garrett Gu, Hovav Shacham
Constant-Time Wasmtime, for Real This Time: End-to-End Verified Zero-Overhead Constant-Time Programming for the Web and Beyond. CoRR (2023)
Andrew Kwong, Walter Wang, Jason Kim, Jonathan Berger, Daniel Genkin, Eyal Ronen, Hovav Shacham, Riad S. Wahby, Yuval Yarom
Checking Passwords on Leaky Computers: A Side Channel Analysis of Chrome's Password Leak Detect Protocol. USENIX Security Symposium (2023)
Yingchen Wang, Riccardo Paccagnella, Alan Wandke, Zhao Gang, Grant Garrett-Grossman, Christopher W. Fletcher, David Kohlbrenner, Hovav Shacham
DVFS Frequently Leaks Secrets: Hertzbleed Attacks Beyond SIKE, Cryptography, and CPU-Only Data. SP (2023)
Yingchen Wang, Riccardo Paccagnella, Elizabeth Tang He, Hovav Shacham, Christopher W. Fletcher, David Kohlbrenner
Hertzbleed: Turning Power Side-Channel Attacks Into Remote Timing Attacks on x86. USENIX Security Symposium (2022)
Shravan Narayan, Craig Disselkoen, Daniel Moghimi, Sunjay Cauligi, Evan Johnson, Zhao Gang, Anjo Vahldiek-Oberwagner, Ravi Sahita, Hovav Shacham, Dean M. Tullsen, Deian Stefan
Swivel: Hardening WebAssembly against Spectre. CoRR (2021)
Shravan Narayan, Craig Disselkoen, Daniel Moghimi, Sunjay Cauligi, Evan Johnson, Zhao Gang, Anjo Vahldiek-Oberwagner, Ravi Sahita, Hovav Shacham, Dean M. Tullsen, Deian Stefan
Swivel: Hardening WebAssembly against Spectre. USENIX Security Symposium (2021)
Shravan Narayan, Craig Disselkoen, Tal Garfinkel, Nathan Froyd, Eric Rahm, Sorin Lerner, Hovav Shacham, Deian Stefan
Retrofitting Fine Grain Isolation in the Firefox Renderer (Extended Version). CoRR (2020)
Garrett Gu, Hovav Shacham
Return-Oriented Programming in RISC-V. CoRR (2020)
Tal Garfinkel, Shravan Narayan, Craig Disselkoen, Hovav Shacham, Deian Stefan
The Road to Less Trusted Code: Lowering the Barrier to In-Process Sandboxing. login Usenix Mag. 45 (4) (2020)
Fraser Brown, John Renner, Andres Nötzli, Sorin Lerner, Hovav Shacham, Deian Stefan
Towards a verified range analysis for JavaScript JITs. PLDI (2020)
Shravan Narayan, Craig Disselkoen, Tal Garfinkel, Nathan Froyd, Eric Rahm, Sorin Lerner, Hovav Shacham, Deian Stefan
Retrofitting Fine Grain Isolation in the Firefox Renderer. USENIX Security Symposium (2020)
Shankara Pailoor, Xinyu Wang, Hovav Shacham, Isil Dillig
Automated policy synthesis for system call sandboxing. Proc. ACM Program. Lang. 4 (OOPSLA) (2020)
Shravan Narayan, Tal Garfinkel, Sorin Lerner, Hovav Shacham, Deian Stefan
Gobi: WebAssembly as a Practical Path to Library Sandboxing. CoRR (2019)
Stephen Checkoway, Jacob Maskiewicz, Christina Garman, Joshua Fried, Shaanan Cohney, Matthew Green, Nadia Heninger, Ralf-Philipp Weinmann, Eric Rescorla, Hovav Shacham
Where did I leave my keys?: lessons from the Juniper Dual EC incident. Commun. ACM 61 (11) (2018)
Hovav Shacham
Short Unique Signatures from RSA with a Tight Security Reduction (in the Random Oracle Model). Financial Cryptography (2018)
David Kohlbrenner, Hovav Shacham
On the effectiveness of mitigations against floating-point timing channels. USENIX Security Symposium (2017)
Wilson Lian, Hovav Shacham, Stefan Savage
A Call to ARMs: Understanding the Costs and Benefits of JIT Spraying Mitigations. NDSS (2017)
Stephen Checkoway, Jacob Maskiewicz, Christina Garman, Joshua Fried, Shaanan Cohney, Matthew Green, Nadia Heninger, Ralf-Philipp Weinmann, Eric Rescorla, Hovav Shacham
A Systematic Analysis of the Juniper Dual EC Incident. CCS (2016)
Ashish Venkat, Sriskanda Shamasunder, Hovav Shacham, Dean M. Tullsen
HIPStR: Heterogeneous-ISA Program State Relocation. ASPLOS (2016)
David Kohlbrenner, Hovav Shacham
Trusted Browsers for Uncertain Times. USENIX Security Symposium (2016)
Stephen Checkoway, Shaanan Cohney, Christina Garman, Matthew Green, Nadia Heninger, Jacob Maskiewicz, Eric Rescorla, Hovav Shacham, Ralf-Philipp Weinmann
A Systematic Analysis of the Juniper Dual EC Incident. IACR Cryptol. ePrint Arch. 2016 (2016)
Steven Hill, Zhimin Zhou, Lawrence K. Saul, Hovav Shacham
On the (In)effectiveness of Mosaicing and Blurring as Tools for Document Redaction. Proc. Priv. Enhancing Technol. 2016 (4) (2016)
Marc Andrysco, David Kohlbrenner, Keaton Mowery, Ranjit Jhala, Sorin Lerner, Hovav Shacham
On Subnormal Floating Point and Abnormal Timing. IEEE Symposium on Security and Privacy (2015)
Wilson Lian, Hovav Shacham, Stefan Savage
Too LeJIT to Quit: Extending JIT Spraying to ARM. NDSS (2015)
Theresa Calderon, Sarah Meiklejohn, Hovav Shacham, Brent Waters
Rethinking Verifiably Encrypted Signatures: A Gap in Functionality and Potential Solutions. CT-RSA (2014)
Keaton Mowery, Eric Wustrow, Tom Wypych, Corey Singleton, Chris Comfort, Eric Rescorla, J. Alex Halderman, Hovav Shacham, Stephen Checkoway
Security Analysis of a Full-Body Scanner. USENIX Security Symposium (2014)
Stephen Checkoway, Ruben Niederhagen, Adam Everspaugh, Matthew Green, Tanja Lange, Thomas Ristenpart, Daniel J. Bernstein, Jake Maskiewicz, Hovav Shacham, Matthew Fredrikson
On the Practical Exploitability of Dual EC in TLS Implementations. USENIX Security Symposium (2014)
Jacob Maskiewicz, Benjamin Ellis, James Mouradian, Hovav Shacham
Mouse Trap: Exploiting Firmware Updates in USB Peripherals. WOOT (2014)
Keaton Mowery, Michael Yung Chung Wei, David Kohlbrenner, Hovav Shacham, Steven Swanson
Welcome to the Entropics: Boot-Time Entropy in Embedded Devices. IEEE Symposium on Security and Privacy (2013)
Steve Lu, Rafail Ostrovsky, Amit Sahai, Hovav Shacham, Brent Waters
Sequential Aggregate Signatures, Multisignatures, and Verifiably Encrypted Signatures Without Random Oracles. J. Cryptol. 26 (2) (2013)
Sarah Meiklejohn, Hovav Shacham
New Trapdoor Projection Maps for Composite-Order Bilinear Groups. IACR Cryptol. ePrint Arch. 2013 (2013)
Stephen Checkoway, Hovav Shacham
Iago attacks: why the system call API is a bad untrusted RPC interface. ASPLOS (2013)
Wilson Lian, Eric Rescorla, Hovav Shacham, Stefan Savage
Measuring the Practical Impact of DNSSEC Deployment. USENIX Security Symposium (2013)
Karyn Benson, Hovav Shacham, Brent Waters
The k-BDH Assumption Family: Bilinear Map Cryptography from Progressively Weaker Assumptions. CT-RSA (2013)
Hovav Shacham, Brent Waters
Compact Proofs of Retrievability. J. Cryptol. 26 (3) (2013)
Mihir Bellare, Zvika Brakerski, Moni Naor, Thomas Ristenpart, Gil Segev, Hovav Shacham, Scott Yilek
Hedged Public-key Encryption: How to Protect against Bad Randomness. IACR Cryptol. ePrint Arch. 2012 (2012)
Keaton Mowery, Sriram Keelveedhi, Hovav Shacham
Are AES x86 cache timing attacks still feasible? CCSW (2012)
Karyn Benson, Hovav Shacham, Brent Waters
The k-BDH Assumption Family: Bilinear Map Cryptography from Progressively Weaker Assumptions. IACR Cryptol. ePrint Arch. 2012 (2012)
Ryan Roemer, Erik Buchanan, Hovav Shacham, Stefan Savage
Return-Oriented Programming: Systems, Languages, and Applications. ACM Trans. Inf. Syst. Secur. 15 (1) (2012)
Stephen Checkoway, Damon McCoy, Brian Kantor, Danny Anderson, Hovav Shacham, Stefan Savage, Karl Koscher, Alexei Czeskis, Franziska Roesner, Tadayoshi Kohno
Comprehensive Experimental Analyses of Automotive Attack Surfaces. USENIX Security Symposium (2011)
Thomas Ristenpart, Hovav Shacham, Thomas Shrimpton
Careful with Composition: Limitations of Indifferentiability and Universal Composability. IACR Cryptol. ePrint Arch. 2011 (2011)
Sarah Meiklejohn, Keaton Mowery, Stephen Checkoway, Hovav Shacham
The Phantom Tollbooth: Privacy-Preserving Electronic Toll Collection in the Presence of Driver Collusion. USENIX Security Symposium (2011)
Karyn Benson, Rafael Dowsley, Hovav Shacham
Do you know where your cloud files are? CCSW (2011)
Thomas Ristenpart, Hovav Shacham, Thomas Shrimpton
Careful with Composition: Limitations of the Indifferentiability Framework. EUROCRYPT (2011)
Bhanu Chandra Vattikonda, Sambit Das, Hovav Shacham
Eliminating fine grained timers in Xen. CCSW (2011)
Stephen Checkoway, Lucas Davi, Alexandra Dmitrienko, Ahmad-Reza Sadeghi, Hovav Shacham, Marcel Winandy
Return-oriented programming without returns. CCS (2010)
Kai Wang, Eric Rescorla, Hovav Shacham, Serge J. Belongie
OpenScan: A Fully Transparent Optical Scan Voting System. EVT/WOTE (2010)
Sarah Meiklejohn, Hovav Shacham, David Mandell Freeman
Limitations on Transformations from Composite-Order to Prime-Order Groups: The Case of Round-Optimal Blind Signatures. IACR Cryptol. ePrint Arch. 2010 (2010)
Karl Koscher, Alexei Czeskis, Franziska Roesner, Shwetak N. Patel, Tadayoshi Kohno, Stephen Checkoway, Damon McCoy, Brian Kantor, Danny Anderson, Hovav Shacham, Stefan Savage
Experimental Security Analysis of a Modern Automobile. IEEE Symposium on Security and Privacy (2010)
Stephen Checkoway, Hovav Shacham, Eric Rescorla
Don't Take LaTeX Files from Strangers. login Usenix Mag. 35 (4) (2010)
Dongseok Jang, Ranjit Jhala, Sorin Lerner, Hovav Shacham
An empirical study of privacy-violating information flows in JavaScript web applications. CCS (2010)
Sarah Meiklejohn, Hovav Shacham, David Mandell Freeman
Limitations on Transformations from Composite-Order to Prime-Order Groups: The Case of Round-Optimal Blind Signatures. ASIACRYPT (2010)
Stephen Checkoway, Hovav Shacham, Eric Rescorla
Are Text-Only Data Formats Safe? Or, Use This LaTeX Class File to Pwn Your Computer. LEET (2010)
Scott Yilek, Eric Rescorla, Hovav Shacham, Brandon Enright, Stefan Savage
When private keys are public: results from the 2008 Debian OpenSSL vulnerability. Internet Measurement Conference (2009)
Stephen Checkoway, Ariel J. Feldman, Brian Kantor, J. Alex Halderman, Edward W. Felten, Hovav Shacham
Can DREs Provide Long-Lasting Security? The Case of Return-Oriented Programming and the AVC Advantage. EVT/WOTE (2009)
Mihir Bellare, Zvika Brakerski, Moni Naor, Thomas Ristenpart, Gil Segev, Hovav Shacham, Scott Yilek
Hedged Public-Key Encryption: How to Protect against Bad Randomness. ASIACRYPT (2009)
Nadia Heninger, Hovav Shacham
Reconstructing RSA Private Keys from Random Key Bits. CRYPTO (2009)
Thomas Ristenpart, Eran Tromer, Hovav Shacham, Stefan Savage
Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds. CCS (2009)
Mira Belenkiy, Jan Camenisch, Melissa Chase, Markulf Kohlweiss, Anna Lysyanskaya, Hovav Shacham
Randomizable Proofs and Delegatable Anonymous Credentials. CRYPTO (2009)
Hovav Shacham, Brent Waters
Compact Proofs of Retrievability. ASIACRYPT (2008)
J. Alex Halderman, Eric Rescorla, Hovav Shacham, David A. Wagner
You Go to Elections with the Voting System You Have: Stop-Gap Mitigations for Deployed Voting Systems. EVT (2008)
Mira Belenkiy, Jan Camenisch, Melissa Chase, Markulf Kohlweiss, Anna Lysyanskaya, Hovav Shacham
Delegatable Anonymous Credentials. IACR Cryptol. ePrint Arch. 2008 (2008)
Erik Buchanan, Ryan Roemer, Hovav Shacham, Stefan Savage
When good instructions go bad: generalizing return-oriented programming to RISC. CCS (2008)
Hovav Shacham, Brent Waters
Compact Proofs of Retrievability. IACR Cryptol. ePrint Arch. 2008 (2008)
Nadia Heninger, Hovav Shacham
Reconstructing RSA Private Keys from Random Key Bits. IACR Cryptol. ePrint Arch. 2008 (2008)
Hovav Shacham
The geometry of innocent flesh on the bone: return-into-libc without function calls (on the x86). CCS (2007)
Hovav Shacham
A Cramer-Shoup Encryption Scheme from the Linear Assumption and from Progressively Weaker Linear Variants. IACR Cryptol. ePrint Arch. 2007 (2007)
Hovav Shacham
The BBG HIBE Has Limited Delegation. IACR Cryptol. ePrint Arch. 2007 (2007)
Hovav Shacham, Brent Waters
Efficient Ring Signatures Without Random Oracles. Public Key Cryptography (2007)
Xavier Boyen, Hovav Shacham, Emily Shen, Brent Waters
Forward-secure signatures with untrusted update. CCS (2006)
Steve Lu, Rafail Ostrovsky, Amit Sahai, Hovav Shacham, Brent Waters
Sequential Aggregate Signatures and Multisignatures without Random Oracles. IACR Cryptol. ePrint Arch. 2006 (2006)
Steve Lu, Rafail Ostrovsky, Amit Sahai, Hovav Shacham, Brent Waters
Sequential Aggregate Signatures and Multisignatures Without Random Oracles. EUROCRYPT (2006)
Xavier Boyen, Hovav Shacham, Emily Shen, Brent Waters
Forward-Secure Signatures with Untrusted Update. IACR Cryptol. ePrint Arch. 2006 (2006)
Hovav Shacham, Brent Waters
Efficient Ring Signatures without Random Oracles. IACR Cryptol. ePrint Arch. 2006 (2006)
Hovav Shacham, Matthew Page, Ben Pfaff, Eu-Jin Goh, Nagendra Modadugu, Dan Boneh
On the effectiveness of address-space randomization. CCS (2004)
Dan Boneh, Xavier Boyen, Hovav Shacham
Short Group Signatures. IACR Cryptol. ePrint Arch. 2004 (2004)
Hovav Shacham, Dan Boneh, Eric Rescorla
Client-side caching for TLS. ACM Trans. Inf. Syst. Secur. 7 (4) (2004)
Dan Boneh, Xavier Boyen, Hovav Shacham
Short Group Signatures. CRYPTO (2004)
Dan Boneh, Ben Lynn, Hovav Shacham
Short Signatures from the Weil Pairing. J. Cryptol. 17 (4) (2004)
Anna Lysyanskaya, Silvio Micali, Leonid Reyzin, Hovav Shacham
Sequential Aggregate Signatures from Trapdoor Permutations. EUROCRYPT (2004)
Dan Boneh, Hovav Shacham
Group signatures with verifier-local revocation. CCS (2004)
Dan Boneh, Craig Gentry, Ben Lynn, Hovav Shacham
Aggregate and Verifiably Encrypted Signatures from Bilinear Maps. EUROCRYPT (2003)
Anna Lysyanskaya, Silvio Micali, Leonid Reyzin, Hovav Shacham
Sequential Aggregate Signatures from Trapdoor Permutations. IACR Cryptol. ePrint Arch. 2003 (2003)
Eu-Jin Goh, Hovav Shacham, Nagendra Modadugu, Dan Boneh
SiRiUS: Securing Remote Untrusted Storage. NDSS (2003)
Hovav Shacham, Dan Boneh
Fast-Track Session Establishment for TLS. NDSS (2002)
Dan Boneh, Craig Gentry, Ben Lynn, Hovav Shacham
Aggregate and Verifiably Encrypted Signatures from Bilinear Maps. IACR Cryptol. ePrint Arch. 2002 (2002)
Dan Boneh, Ben Lynn, Hovav Shacham
Short Signatures from the Weil Pairing. ASIACRYPT (2001)
Hovav Shacham, Dan Boneh
Improving SSL Handshake Performance via Batching. CT-RSA (2001)