Eran Tromer (ערן טרומר)

Senior Lecturer (assistant professor),

Blavatnik School of Computer Science
Tel Aviv University

CPIIS

I-CORE ALGO

Codirector, Check Point Institute for Information Security (CPIIS)
Head, Laboratory for Experimental Information Security (LEISec)
Member, Israeli Center of Research Excellence in Algorithms (I-CORE Algo)

E-mail:	or
Office:	Schreiber building, room 304 ([pdf map] [interactive map] [מפה])
Assistant:	Galit Herzberg Schreiber building, room 001 +972-3-640-8376
PGP key:	[public] [private]
Mailing address:	School of Computer Science Tel Aviv University Tel Aviv 69978 Israel

I am a faculty member at the School of Computer Science at Tel Aviv University.

My research focus is information security, cryptography and algorithms. I'm particularly interested in what happens when cryptographic systems meet the real world, where computation is faulty and leaky.

In the Laboratory for Experimental Information Security (LEISec), my group investigates information leakage through physical (e.g., acoustic and electrical) and software (e.g., cache) side channels.

One of my current projects is SCIPR Lab, which constructs cryptographic systems for ensuring the integrity of computation conducted on untrusted, faulty and malicious platforms.

Teaching

Introduction to Information Security

Workshop in Information Security

Information Security - Theory vs. Reality, winter

Operating Systems, winter 2011-2012
Seminar in Information Security, spring 2011

Papers

Eli Ben-Sasson, Alessandro Chiesa, Eran Tromer, Madars Virza, Succinct non-interactive arguments for a von Neumann architecture, preprint.
[pdf] [eprint]
Daniel Genkin, Adi Shamir, Eran Tromer, RSA key extraction via low-bandwidth acoustic cryptanalysis, preprint.
[pdf] [eprint] [web page with summary and Q&A]
Stephen Chong, Eran Tromer, Jeffrey A. Vaughan, Enforcing language semantics using proof-carrying data, preprint.
[pdf] [eprint]
Eli Ben-Sasson, Alessandro Chiesa, Christina Garman, Matthew Green, Ian Miers, Eran Tromer, Madars Virza, Zerocash: decentralized anonymous payments from Bitcoin, proc. IEEE Symposium on Security & Privacy 2014, to appear.
Daniel Genkin, Yuval Ishai, Manoj M. Prabhakaran, Amit Sahai, Eran Tromer, Circuits resilient to additive attacks with applications to secure computation, proc. STOC 2014, to appear.
Eli Ben-Sasson, Alessandro Chiesa, Daniel Genkin, Eran Tromer, Madars Virza, SNARKs for C: verifying program executions succinctly and in zero knowledge , proc. CRYPTO 2013, Part II, LNCS 8043, 90-108, Springer, 2013.

Eli Ben-Sasson, Alessandro Chiesa, Daniel Genkin, Eran Tromer, On the concrete-efficiency threshold of probabilistically-checkable proofs, proc. STOC 2013, 585-594, ACM, 2013.
[ECCC]
Nir Bitansky, Ran Canetti, Alessandro Chiesa, Eran Tromer, Recursive composition and bootstrapping for SNARKs and proof-carrying data, proc. STOC 2013, 111-120, ACM, 2013.
[pdf] [eprint]
Ory Samorodnitzky, Eran Tromer, Avishai Wool, Analyzing unique-bid auction sites for fun and profit, proc. Network & Distributed System Security Symposium (NDSS) 2013, 2013.
[pdf] [on conference site]
Eli Ben-Sasson, Alessandro Chiesa, Daniel Genkin, Eran Tromer, Fast reductions from RAMs to delegatable succinct constraint satisfaction problems, proc. Innovations in Theoretical Computer Science (ITCS) 2013, 401-414, ACM, 2013.
Preprint: [pdf] [eprint]
Adriana López-Alt, Eran Tromer, Vinod Vaikuntanathan, On-the-fly multiparty computation on the cloud via multikey fully homomorphic encryption, proc. STOC 2012, 1219-1234, ACM, 2012.
[eprint] (extended version)
Gilad Asharov, Abhishek Jain, Adriana López-Alt, Eran Tromer, Vinod Vaikuntanathan, Daniel Wichs, Multiparty computation with low communication, computation and interaction via threshold FHE, proc. Eurocrypt 2012, LNCS 7237, 483-501, 2012.
[pdf] (merged version of [eprint 2011/663] and [eprint 2011/613])
Alessandro Chiesa, Eran Tromer, Proof-carrying data: Secure computation on untrusted platforms, The Next Wave, vol. 19 no. 2, National Security Agency, 2012.
[local pdf] [NSA pdf]
Shai Shalev-Shwartz, Ohad Shamir, Eran Tromer, Using more data to speed-up training time, proc. International Conference on Artificial Intelligence and Statistics (AISTATS) 2012, Journal of Machine Learning Research, vol. 22, 1019-1027, Microtome Publishing, 2012
[arXiv]
Nir Bitansky, Ran Canetti, Alessandro Chiesa, Eran Tromer, From extractable collision resistance to succinct non-Interactive arguments of knowledge, and back again, proc. Innovations in Computer Science (ITCS) 2012, 326-349, ACM, 2012.
[pdf] [eprint] (extended version)
Sebastian Faust, Tal Rabin, Leonid Reyzin, Eran Tromer, Vinod Vaikuntanathan, Protecting circuits from leakage: the computationally-bounded and noisy cases, proc. Eurocrypt 2010, LNCS 6110, 135-156, Springer, 2010.
[pdf]
Alessandro Chiesa, Eran Tromer, Proof-carrying data and hearsay arguments from signature cards, proc. Innovations in Computer Science (ICS) 2010, 310--331, Tsinghua University Press, 2010.
[abstract] [pdf]
Thomas Ristenpart, Eran Tromer, Hovav Shacham, Stefan Savage, Hey, you, get off of my cloud! Exploring information leakage in third-party compute clouds, proc. ACM Conference on Computer and Communications Security (CCS) 2009, 199-212, ACM, 2009.
[abstract] [pdf]
Eran Tromer, Dag Arne Osvik, Adi Shamir, Efficient cache attacks on AES, and countermeasures, Journal of Cryptology, vol. 23 no. 1, 37-71, Springer, 2010.
[pdf] (convenient format) ©1 [pdf] (official journal format) ©1
(first presented at the FSE 2005 rump session, February 2005 — see below)
Maxwell Krohn, Eran Tromer, Non-interference for a practical DIFC-based operating system, proc. IEEE Symposium on Security and Privacy 2009, 61-76, IEEE, 2009.
[pdf] [ps.gz] ©2
Ronald L. Rivest, Benjamin Agre, Daniel V. Bailey, Christopher Crutchfield, Yevgeniy Dodis, Kermin Elliott Fleming, Asif Khan, Jayant Krishnamurthy, Yuncheng Lin, Leo Reyzin, Emily Shen, Jim Sukha, Drew Sutherland, Eran Tromer, Yiqun Lisa Yin, The MD6 hash function — a proposal to NIST for SHA-3, submission to the National Institute of Standards and Technology hash function competition, 2008.
[web page] [pdf report]
Sharon Goldberg, David Xiao, Eran Tromer, Boaz Barak, Jennifer Rexford, Path-quality monitoring in the presence of adversaries, proc. SIGMETRICS 2008, 193-204, ACM, 2008.
[pdf] (full version) ©4
Ran Canetti, Ron Rivest, Eran Tromer, Comments on NIST Draft Requirements and Criteria for Hash Algorithm, letter to the National Institute of Standards and Technology, April 2007.
[pdf]
Eran Tromer, Hardware-Based Cryptanalysis, Ph.D. dissertation, 2007.
[web page]
Willi Geiselmann, Adi Shamir, Rainer Steinwandt, Eran Tromer, Fault-tolerance in hardware for sparse systems of linear equations, with applications to integer factorization, Chapter 8 in N. Nedjah, L. de Macedo Mourelle (Eds.), New Trends in Cryptographic Systems, Nova Science Publishers, 2006.
Dag Arne Osvik, Adi Shamir, Eran Tromer, Cache attacks and countermeasures: the case of AES, proc. RSA Conference Cryptographers Track (CT-RSA) 2006, LNCS 3860, 1-20, Springer, 2006.
[pdf] [ps.gz] (extended version) ©3
(see journal version above; first presented at the FSE 2005 rump session, February 2005 — see below)
Willi Geiselmann, Adi Shamir, Rainer Steinwandt, Eran Tromer, Scalable Hardware for Sparse Systems of Linear Equations, with Applications to Integer Factorization, proc. CHES 2005, LNCS 3659, 131-146, Springer, 2005.
[pdf] [ps.gz] ©1
Willi Geiselmann, Adi Shamir, Rainer Steinwandt, Eran Tromer, A systolic design for supporting Wiedemann's algorithm, invited paper, proc. Workshop on Special Purpose Hardware for Attacking Cryptographic Systems (SHARCS), 13-17, 2005.
(see revised CHES 2005 version above)
Adi Shamir, Eran Tromer, Special-purpose hardware for factoring: the NFS sieving step, proc. Workshop on Special Purpose Hardware for Attacking Cryptographic Systems (SHARCS), 1-12, 2005.
[pdf] [ps.gz] (see slides below)
Willi Geiselmann, Hubert Köpfer, Rainer Steinwandt, Eran Tromer, Improved routing-based linear algebra for the Number Field Sieve, proc. International Conference on Information Technology: Coding and Computing (ITCC'05), Volume 1, 636-641, IEEE, 2005.
[pdf] [ps.gz] ©2
Moni Naor, Asaf Nussboim, Eran Tromer, Efficiently constructible huge graphs that preserve first order properties of random graphs, proc. Theory of Cryptography Conference (TCC) 2005, LNCS 3378, 66-85, Springer, 2005.
[pdf] [ps.gz] ©1
Arjen K. Lenstra, Eran Tromer, Adi Shamir, Wil Kortsmit, Bruce Dodson, James Hughes, Paul Leyland, Factoring estimates for a 1024-bit RSA modulus, proc. Asiacrypt 2003, LNCS 2894, 331-346, Springer, 2003.
[pdf] [ps.gz] ©1
Boaz Barak, Ronen Shaltiel, Eran Tromer, True random number generators secure in a changing environment, proc. CHES 2003, LNCS 2779, 166-180, Springer, 2003.
[pdf] [ps.gz] ©1
Adi Shamir, Eran Tromer, On the cost of factoring RSA-1024, RSA CryptoBytes, vol. 6 no. 2, 10-19, 2003.
[pdf] [ps.gz]
Adi Shamir, Eran Tromer, Factoring large numbers with the TWIRL device, proc. CRYPTO 2003, LNCS 2729, 1-26, Springer, 2003.
[pdf] [ps.gz] ©1 [dedicated webpage]
Arjen K. Lenstra, Adi Shamir, Jim Tomlinson, Eran Tromer, Analysis of Bernstein's factorization circuit, proc. Asiacrypt 2002, LNCS 2501, 1-26, Springer, 2002.
[pdf] [ps.gz] [html] ©1

©1: Copyright © IACR in part or whole.
©2: Copyright © IEEE in part or whole.
©3: Copyright © Springer-Verlag in part or whole.
©4: Copyright © ACM in part or whole.

Presentations

[partial]

Integrity in Car-Computing: a Cryptographic Vision for Integrity in Vehicle Networks, Transportation CyberSecurity, Tel Aviv 2014, Feb 2014.
[PowerPoint] [pdf]
The Dread, Deed and Dream of Cyber-Security, Kavli Frontiers of Science Israeli-American Symposium, organized by the Israel Academy of Science and Humanities and U.S. National Academy of Sciences, June 2013.
[video]
Architectural Attacks and their Mitigation by Binary Transformation, ACM Symposium on Operating Systems Principles (SOSP) 2009 work-in-progress session, 2009.
[pdf]
Architectural Side Channels in Cloud Computing, invited talk, Crypto in the Cloud workshop, MIT, August 5 2009.
[PowerPoint] [pdf]
Protecting Circuits from Computationally-Bounded Leakage, invited talk, Crypto in the Cloud workshop, MIT, August 4 2009.
[PowerPoint] [pdf] (see paper above)
MIT CSAIL Industry Affiliates Program, Cloud Computing and Virtualization panel, MIT, May 27, 2009.
Cache-based side channel attacks and their implications, invited talk at the Quo Vadis Cryptography workshop, Warsaw, May 2007.
Invited talks at Microsoft Research Summer School, Indian Institute of Science, 2006.
Cryptanalytic applications of the PlayStation 3: the case of DES, SHARCS 2006 rump session, April 2006.
[pdf]
Special-purpose hardware for factoring, invited talk at the Quo Vadis Cryptography workshop, Warsaw, May 2005.
Other people's cache: Hyper Attacks on HyperThreaded processors, FSE 2005 rump session, February 2005.
Full AES key extraction in 65 milliseconds using cache attacks, Crypto 2005 rump session, August 2005.
[PowerPoint] (see paper above)
Special-Purpose Hardware for Factoring: the NFS sieving step, invited talk at SHARCS 2005, February 2005.
[PowerPoint XP] [PDF without animated illustrations] (see paper above)
Appendix: video of an actual TWINKLE device (joint work with Adi Shamir, Eli Biham and Orr Dunkelman): [avi]
Acoustic cryptanalysis: on nosy people and noisy machines, Eurocrypt 2004 rump session, May 2004.
[web page]
Hardware-based implementations of factoring algorithms, invited talk at ECC 2003, August 2003.
[PowerPoint XP] [PDF without animated illustrations]

Resource pages

Gpcode.ak Cryptographic Challenge
Wonderful Cryptography — topics for a motivational "introduction to cryptography" lecture
Special-purpose cryptanalytic devices — an annotated taxonomy

Humor

On the design and cryptanalysis of a one-way hash, Journal of Craptology volume 5, 2008.
Presented with Carl Ellison, Victor Miller and Rebecca Wright, CRYPTO 2007 rump session, August 2007.
[pdf]

Affiliated websites

Haayal Hakore

Old course pages

Secret Key Cryptography (Spring 2006) course page
Public Key Cryptography (Spring 2005) course page
Secret Key Cryptography (Spring 2004) course page
Public Key Cryptography (Spring 2003) course page
Foundations of Cryptography (Winter 2001/2002) course page

Technical tidbits

pages2pdf: a shell script for converting a bunch of images (say, scanned pages or transparencies), given in any common format, into a single PDF files. Optionally, reduces resolution and includes multiple images per page. See also slides2pdf, an older and somewhat inferior evrsion (which produced these outputs: [1] [2] [3] [4] [5]).
Forcing OpenSSH to use a hard-coded password
Installing Mathematica fonts in Exceed
LyX FAQ
rexecsync: a shell script for saving the output of an arbitrary command on a remote computer into a local file, such that on repeated invocations only differences are transferred (requires librsync).
Java Instrumentation Engine — a flexible Java sourcecode instrumentation program (unmaintained).