Hovav Shacham

According to our database, Hovav Shacham authored at least 79 papers between 2001 and 2024.

Collaborative distances:

• Dijkstra number of three.
• Erdős number of three.

2024

Pixel Thief: Exploiting SVG Filter Leakage in Firefox and Chrome.

Sioli O'Connell, Lishay Aben Sour, Ron Magen, Daniel Genkin, Yossi Oren, Hovav Shacham, Yuval Yarom

Proceedings of the 33rd USENIX Security Symposium, 2024

GPU.zip: On the Side-Channel Implications of Hardware-Based Graphical Data Compression.

Yingchen Wang, Riccardo Paccagnella, Zhao Gang, Willy R. Vasquez, David Kohlbrenner, Hovav Shacham, Christopher W. Fletcher

Proceedings of the IEEE Symposium on Security and Privacy, 2024

Icarus: Trustworthy Just-In-Time Compilers with Symbolic Meta-Execution.

Naomi Smith, Abhishek Sharma, John Renner, David Thien, Fraser Brown, Hovav Shacham, Ranjit Jhala, Deian Stefan

Proceedings of the ACM SIGOPS 30th Symposium on Operating Systems Principles, 2024

2023

Hertzbleed: Turning Power Side-Channel Attacks Into Remote Timing Attacks on x86.

Yingchen Wang, Riccardo Paccagnella, Elizabeth Tang He, Hovav Shacham, Christopher W. Fletcher, David Kohlbrenner

IEEE Micro, 2023

Constant-Time Wasmtime, for Real This Time: End-to-End Verified Zero-Overhead Constant-Time Programming for the Web and Beyond.

Garrett Gu, Hovav Shacham

CoRR, 2023

The Most Dangerous Codec in the World: Finding and Exploiting Vulnerabilities in H.264 Decoders.

Willy R. Vasquez, Stephen Checkoway, Hovav Shacham

Proceedings of the 32nd USENIX Security Symposium, 2023

Checking Passwords on Leaky Computers: A Side Channel Analysis of Chrome's Password Leak Detect Protocol.

Andrew Kwong, Walter Wang, Jason Kim, Jonathan Berger, Daniel Genkin, Eyal Ronen, Hovav Shacham, Riad S. Wahby, Yuval Yarom

Proceedings of the 32nd USENIX Security Symposium, 2023

DVFS Frequently Leaks Secrets: Hertzbleed Attacks Beyond SIKE, Cryptography, and CPU-Only Data.

Yingchen Wang, Riccardo Paccagnella, Alan Wandke, Zhao Gang, Grant Garrett-Grossman, Christopher W. Fletcher, David Kohlbrenner, Hovav Shacham

Proceedings of the 44th IEEE Symposium on Security and Privacy, 2023

2021

Swivel: Hardening WebAssembly against Spectre.

Shravan Narayan, Craig Disselkoen, Daniel Moghimi, Sunjay Cauligi, Evan Johnson, Zhao Gang, Anjo Vahldiek-Oberwagner, Ravi Sahita, Hovav Shacham, Dean M. Tullsen, Deian Stefan

Proceedings of the 30th USENIX Security Symposium, 2021

2020

The Road to Less Trusted Code: Lowering the Barrier to In-Process Sandboxing.

Tal Garfinkel, Shravan Narayan, Craig Disselkoen, Hovav Shacham, Deian Stefan

login Usenix Mag., 2020

Automated policy synthesis for system call sandboxing.

Shankara Pailoor, Xinyu Wang, Hovav Shacham, Isil Dillig

Proc. ACM Program. Lang., 2020

Return-Oriented Programming in RISC-V.

Garrett Gu, Hovav Shacham

CoRR, 2020

Retrofitting Fine Grain Isolation in the Firefox Renderer (Extended Version).

Shravan Narayan, Craig Disselkoen, Tal Garfinkel, Nathan Froyd, Eric Rahm, Sorin Lerner, Hovav Shacham, Deian Stefan

CoRR, 2020

Retrofitting Fine Grain Isolation in the Firefox Renderer.

Shravan Narayan, Craig Disselkoen, Tal Garfinkel, Nathan Froyd, Eric Rahm, Sorin Lerner, Hovav Shacham, Deian Stefan

Proceedings of the 29th USENIX Security Symposium, 2020

Towards a verified range analysis for JavaScript JITs.

Fraser Brown, John Renner, Andres Nötzli, Sorin Lerner, Hovav Shacham, Deian Stefan

Proceedings of the 41st ACM SIGPLAN International Conference on Programming Language Design and Implementation, 2020

2019

Gobi: WebAssembly as a Practical Path to Library Sandboxing.

Shravan Narayan, Tal Garfinkel, Sorin Lerner, Hovav Shacham, Deian Stefan

CoRR, 2019

2018

Where did I leave my keys?: lessons from the Juniper Dual EC incident.

Stephen Checkoway, Jacob Maskiewicz, Christina Garman, Joshua Fried, Shaanan Cohney, Matthew Green, Nadia Heninger, Ralf-Philipp Weinmann, Eric Rescorla, Hovav Shacham

Commun. ACM, 2018

Short Unique Signatures from RSA with a Tight Security Reduction (in the Random Oracle Model).

Hovav Shacham

Proceedings of the Financial Cryptography and Data Security, 2018

2017

On the effectiveness of mitigations against floating-point timing channels.

David Kohlbrenner, Hovav Shacham

Proceedings of the 26th USENIX Security Symposium, 2017

A Call to ARMs: Understanding the Costs and Benefits of JIT Spraying Mitigations.

Wilson Lian, Hovav Shacham, Stefan Savage

Proceedings of the 24th Annual Network and Distributed System Security Symposium, 2017

2016

On the (In)effectiveness of Mosaicing and Blurring as Tools for Document Redaction.

Steven Hill, Zhimin Zhou, Lawrence K. Saul, Hovav Shacham

Proc. Priv. Enhancing Technol., 2016

A Systematic Analysis of the Juniper Dual EC Incident.

Stephen Checkoway, Shaanan Cohney, Christina Garman, Matthew Green, Nadia Heninger, Jacob Maskiewicz, Eric Rescorla, Hovav Shacham, Ralf-Philipp Weinmann

IACR Cryptol. ePrint Arch., 2016

Trusted Browsers for Uncertain Times.

David Kohlbrenner, Hovav Shacham

Proceedings of the 25th USENIX Security Symposium, 2016

A Systematic Analysis of the Juniper Dual EC Incident.

Stephen Checkoway, Jacob Maskiewicz, Christina Garman, Joshua Fried, Shaanan Cohney, Matthew Green, Nadia Heninger, Ralf-Philipp Weinmann, Eric Rescorla, Hovav Shacham

Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, 2016

HIPStR: Heterogeneous-ISA Program State Relocation.

Ashish Venkat, Sriskanda Shamasunder, Hovav Shacham, Dean M. Tullsen

Proceedings of the Twenty-First International Conference on Architectural Support for Programming Languages and Operating Systems, 2016

2015

On Subnormal Floating Point and Abnormal Timing.

Marc Andrysco, David Kohlbrenner, Keaton Mowery, Ranjit Jhala, Sorin Lerner, Hovav Shacham

Proceedings of the 2015 IEEE Symposium on Security and Privacy, 2015

Too LeJIT to Quit: Extending JIT Spraying to ARM.

Wilson Lian, Hovav Shacham, Stefan Savage

Proceedings of the 22nd Annual Network and Distributed System Security Symposium, 2015

2014

Mouse Trap: Exploiting Firmware Updates in USB Peripherals.

Jacob Maskiewicz, Benjamin Ellis, James Mouradian, Hovav Shacham

Proceedings of the 8th USENIX Workshop on Offensive Technologies, 2014

Security Analysis of a Full-Body Scanner.

Keaton Mowery, Eric Wustrow, Tom Wypych, Corey Singleton, Chris Comfort, Eric Rescorla, J. Alex Halderman, Hovav Shacham, Stephen Checkoway

Proceedings of the 23rd USENIX Security Symposium, San Diego, CA, USA, August 20-22, 2014., 2014

On the Practical Exploitability of Dual EC in TLS Implementations.

Stephen Checkoway, Ruben Niederhagen, Adam Everspaugh, Matthew Green, Tanja Lange, Thomas Ristenpart, Daniel J. Bernstein, Jake Maskiewicz, Hovav Shacham, Matthew Fredrikson

Proceedings of the 23rd USENIX Security Symposium, San Diego, CA, USA, August 20-22, 2014., 2014

Rethinking Verifiably Encrypted Signatures: A Gap in Functionality and Potential Solutions.

Theresa Calderon, Sarah Meiklejohn, Hovav Shacham, Brent Waters

Proceedings of the Topics in Cryptology - CT-RSA 2014, 2014

2013

Compact Proofs of Retrievability.

Hovav Shacham, Brent Waters

J. Cryptol., 2013

Sequential Aggregate Signatures, Multisignatures, and Verifiably Encrypted Signatures Without Random Oracles.

Steve Lu, Rafail Ostrovsky, Amit Sahai, Hovav Shacham, Brent Waters

J. Cryptol., 2013

New Trapdoor Projection Maps for Composite-Order Bilinear Groups.

Sarah Meiklejohn, Hovav Shacham

IACR Cryptol. ePrint Arch., 2013

Measuring the Practical Impact of DNSSEC Deployment.

Wilson Lian, Eric Rescorla, Hovav Shacham, Stefan Savage

Proceedings of the 22th USENIX Security Symposium, Washington, DC, USA, August 14-16, 2013, 2013

Welcome to the Entropics: Boot-Time Entropy in Embedded Devices.

Keaton Mowery, Michael Yung Chung Wei, David Kohlbrenner, Hovav Shacham, Steven Swanson

Proceedings of the 2013 IEEE Symposium on Security and Privacy, 2013

Iago attacks: why the system call API is a bad untrusted RPC interface.

Stephen Checkoway, Hovav Shacham

Proceedings of the Architectural Support for Programming Languages and Operating Systems, 2013

2012

Return-Oriented Programming: Systems, Languages, and Applications.

Ryan Roemer, Erik Buchanan, Hovav Shacham, Stefan Savage

ACM Trans. Inf. Syst. Secur., 2012

The k-BDH Assumption Family: Bilinear Map Cryptography from Progressively Weaker Assumptions.

Karyn Benson, Hovav Shacham, Brent Waters

IACR Cryptol. ePrint Arch., 2012

Hedged Public-key Encryption: How to Protect against Bad Randomness.

Mihir Bellare, Zvika Brakerski, Moni Naor, Thomas Ristenpart, Gil Segev, Hovav Shacham, Scott Yilek

IACR Cryptol. ePrint Arch., 2012

Are AES x86 cache timing attacks still feasible?

Keaton Mowery, Sriram Keelveedhi, Hovav Shacham

Proceedings of the 2012 ACM Workshop on Cloud computing security, 2012

2011

Careful with Composition: Limitations of Indifferentiability and Universal Composability.

Thomas Ristenpart, Hovav Shacham, Thomas Shrimpton

IACR Cryptol. ePrint Arch., 2011

The Phantom Tollbooth: Privacy-Preserving Electronic Toll Collection in the Presence of Driver Collusion.

Sarah Meiklejohn, Keaton Mowery, Stephen Checkoway, Hovav Shacham

Proceedings of the 20th USENIX Security Symposium, 2011

Comprehensive Experimental Analyses of Automotive Attack Surfaces.

Stephen Checkoway, Damon McCoy, Brian Kantor, Danny Anderson, Hovav Shacham, Stefan Savage, Karl Koscher, Alexei Czeskis, Franziska Roesner, Tadayoshi Kohno

Proceedings of the 20th USENIX Security Symposium, 2011

Careful with Composition: Limitations of the Indifferentiability Framework.

Thomas Ristenpart, Hovav Shacham, Thomas Shrimpton

Proceedings of the Advances in Cryptology - EUROCRYPT 2011, 2011

Eliminating fine grained timers in Xen.

Bhanu Chandra Vattikonda, Sambit Das, Hovav Shacham

Proceedings of the 3rd ACM Cloud Computing Security Workshop, 2011

Do you know where your cloud files are?

Karyn Benson, Rafael Dowsley, Hovav Shacham

Proceedings of the 3rd ACM Cloud Computing Security Workshop, 2011

2010

Don't Take LaTeX Files from Strangers.

Stephen Checkoway, Hovav Shacham, Eric Rescorla

login Usenix Mag., 2010

Limitations on Transformations from Composite-Order to Prime-Order Groups: The Case of Round-Optimal Blind Signatures.

Sarah Meiklejohn, Hovav Shacham, David Mandell Freeman

IACR Cryptol. ePrint Arch., 2010

OpenScan: A Fully Transparent Optical Scan Voting System.

Kai Wang, Eric Rescorla, Hovav Shacham, Serge J. Belongie

Proceedings of the 2010 Electronic Voting Technology Workshop / Workshop on Trustworthy Elections, 2010

Experimental Security Analysis of a Modern Automobile.

Karl Koscher, Alexei Czeskis, Franziska Roesner, Shwetak N. Patel, Tadayoshi Kohno, Stephen Checkoway, Damon McCoy, Brian Kantor, Danny Anderson, Hovav Shacham, Stefan Savage

Proceedings of the 31st IEEE Symposium on Security and Privacy, 2010

Are Text-Only Data Formats Safe? Or, Use This LaTeX Class File to Pwn Your Computer.

Stephen Checkoway, Hovav Shacham, Eric Rescorla

Proceedings of the 3rd USENIX Workshop on Large-Scale Exploits and Emergent Threats, 2010

An empirical study of privacy-violating information flows in JavaScript web applications.

Dongseok Jang, Ranjit Jhala, Sorin Lerner, Hovav Shacham

Proceedings of the 17th ACM Conference on Computer and Communications Security, 2010

Return-oriented programming without returns.

Stephen Checkoway, Lucas Davi, Alexandra Dmitrienko, Ahmad-Reza Sadeghi, Hovav Shacham, Marcel Winandy

Proceedings of the 17th ACM Conference on Computer and Communications Security, 2010

2009

Can DREs Provide Long-Lasting Security? The Case of Return-Oriented Programming and the AVC Advantage.

Stephen Checkoway, Ariel J. Feldman, Brian Kantor, J. Alex Halderman, Edward W. Felten, Hovav Shacham

Proceedings of the 2009 Electronic Voting Technology Workshop / Workshop on Trustworthy Elections, 2009

When private keys are public: results from the 2008 Debian OpenSSL vulnerability.

Scott Yilek, Eric Rescorla, Hovav Shacham, Brandon Enright, Stefan Savage

Proceedings of the 9th ACM SIGCOMM Internet Measurement Conference, IMC 2009, Chicago, 2009

Randomizable Proofs and Delegatable Anonymous Credentials.

Mira Belenkiy, Jan Camenisch, Melissa Chase, Markulf Kohlweiss, Anna Lysyanskaya, Hovav Shacham

Proceedings of the Advances in Cryptology, 2009

Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds.

Thomas Ristenpart, Eran Tromer, Hovav Shacham, Stefan Savage

Proceedings of the 2009 ACM Conference on Computer and Communications Security, 2009

2008

Reconstructing RSA Private Keys from Random Key Bits.

Nadia Heninger, Hovav Shacham

IACR Cryptol. ePrint Arch., 2008

Delegatable Anonymous Credentials.

Mira Belenkiy, Jan Camenisch, Melissa Chase, Markulf Kohlweiss, Anna Lysyanskaya, Hovav Shacham

IACR Cryptol. ePrint Arch., 2008

You Go to Elections with the Voting System You Have: Stop-Gap Mitigations for Deployed Voting Systems.

J. Alex Halderman, Eric Rescorla, Hovav Shacham, David A. Wagner

Proceedings of the 2008 USENIX/ACCURATE Electronic Voting Workshop, 2008

When good instructions go bad: generalizing return-oriented programming to RISC.

Erik Buchanan, Ryan Roemer, Hovav Shacham, Stefan Savage

Proceedings of the 2008 ACM Conference on Computer and Communications Security, 2008

2007

The BBG HIBE Has Limited Delegation.

Hovav Shacham

IACR Cryptol. ePrint Arch., 2007

A Cramer-Shoup Encryption Scheme from the Linear Assumption and from Progressively Weaker Linear Variants.

Hovav Shacham

IACR Cryptol. ePrint Arch., 2007

The geometry of innocent flesh on the bone: return-into-libc without function calls (on the x86).

Hovav Shacham

Proceedings of the 2007 ACM Conference on Computer and Communications Security, 2007

2006

New paradigms in signature schemes.

Hovav Shacham

PhD thesis, 2006

Efficient Ring Signatures without Random Oracles.

Hovav Shacham, Brent Waters

IACR Cryptol. ePrint Arch., 2006

Sequential Aggregate Signatures and Multisignatures without Random Oracles.

Steve Lu, Rafail Ostrovsky, Amit Sahai, Hovav Shacham, Brent Waters

IACR Cryptol. ePrint Arch., 2006

Forward-Secure Signatures with Untrusted Update.

Xavier Boyen, Hovav Shacham, Emily Shen, Brent Waters

IACR Cryptol. ePrint Arch., 2006

2004

Client-side caching for TLS.

Hovav Shacham, Dan Boneh, Eric Rescorla

ACM Trans. Inf. Syst. Secur., 2004

Short Signatures from the Weil Pairing.

Dan Boneh, Ben Lynn, Hovav Shacham

J. Cryptol., 2004

Short Group Signatures.

Dan Boneh, Xavier Boyen, Hovav Shacham

IACR Cryptol. ePrint Arch., 2004

On the effectiveness of address-space randomization.

Hovav Shacham, Matthew Page, Ben Pfaff, Eu-Jin Goh, Nagendra Modadugu, Dan Boneh

Proceedings of the 11th ACM Conference on Computer and Communications Security, 2004

Group signatures with verifier-local revocation.

Dan Boneh, Hovav Shacham

Proceedings of the 11th ACM Conference on Computer and Communications Security, 2004

2003

Sequential Aggregate Signatures from Trapdoor Permutations.

Anna Lysyanskaya, Silvio Micali, Leonid Reyzin, Hovav Shacham

IACR Cryptol. ePrint Arch., 2003

SiRiUS: Securing Remote Untrusted Storage.

Eu-Jin Goh, Hovav Shacham, Nagendra Modadugu, Dan Boneh

Proceedings of the Network and Distributed System Security Symposium, 2003

2002

Aggregate and Verifiably Encrypted Signatures from Bilinear Maps.

Dan Boneh, Craig Gentry, Ben Lynn, Hovav Shacham

IACR Cryptol. ePrint Arch., 2002

Fast-Track Session Establishment for TLS.

Hovav Shacham, Dan Boneh

Proceedings of the Network and Distributed System Security Symposium, 2002

2001

Improving SSL Handshake Performance via Batching.

Hovav Shacham, Dan Boneh

Proceedings of the Topics in Cryptology, 2001