Posts by Collection

Frontal Attack: Leaking Control-​Flow in SGX via the CPU Frontend

Published in USENIX Security, 2021

We introduce a timing side-channel attack in the Frontend of Intel CPU processors, which uncovers measurable differences between instructions that only differ in their adjacent instructions and virtual addresses.

Recommended citation: Ivan Puddu, Moritz Schneider, Miro Haller, Srdjan Čapkun. (2021). "Frontal Attack: Leaking Control-​Flow in SGX via the CPU Frontend" USENIX Security 2021. https://www.usenix.org/system/files/sec21-puddu.pdf

HECO: Automatic Code Optimizations for Efficient Fully Homomorphic Encryption

Published in arXiv preprint, 2022

HECO is an end-to-end compiler for FHE that aims to enable non-experts to develop secure and efficient FHE applications.

Recommended citation: Alexander Viand, Patrick Jattke, Miro Haller, Anwar Hithnawi. (2022). "HECO: Automatic Code Optimizations for Efficient Fully Homomorphic Encryption" arXiv preprint, arXiv:2202.01649. https://arxiv.org/abs/2202.01649

SGX Accurate Time Measurements

Published: June 06, 2019

In my Bachelor’s thesis presentation, I briefly summarize the time measurement improvements inside SGX enclaves that we contributed. Moreover, I discuss our discovery of the “Poor man’s CMOV” phenomenon, which later led to the Frontal Attack.

Revisiting Microarchitectural Side-Channels

Published: June 01, 2020

This talks presents the results of applying cache side-channels to contemporary hardware and investigating AES lookup tables, AES key scheduling, and Argon2. The slides give a brief overview of the content described in this blog post

Optimizing Elligator 1 on Curve1174

Published: July 05, 2021

At the end of the Advanced Systems Lab, we presented a brief overview on our optimizations for Elligator 1, described in this blog post

Climbing the Hacking /mnt/ain

Published: October 12, 2021

In this presentation at the Swiss Cyber Storm conference in 2021, I talk about my experiences as team coach of the Swiss National Hacking Team for the European Cyber Security Challenge 2021. In particular, I discuss the team selection, training, and final competition. Furthermore, a team member gives a quick glance into a challenging heap exploitation challenge that our team solved during preparation.