Eran Tromer (ערן טרומר)

Senior Lecturer,

Blavatnik School of Computer Science
Tel Aviv University

Acting Head, Check Point Institute for Information Security
Member, I-CORE Center for Algorithms

E-mail:	or
Office:	Schreiber building, room 304 (map מפה)
Office hours:	by e-mail coordination
PGP key:	[public] [private]
Mailing address:	School of Computer Science Tel Aviv University Tel Aviv 69978 Israel

I am a faculty member at the School of Computer Science at Tel Aviv University.

My research focus is information security, cryptography and algorithms. I'm particularly interested in what happens when cryptographic systems meet the real world, where computation is faulty and leaky.

Join us at the SHARCS 2012 workshop on Special-Purpose Hardware for Attacking Cryptographic Systems (17–18 March 2012, Washington DC), at SYSTOR 2012 (June 4-6, 2012, Haifa, Israel) and at CRYPTO 2012 (12-23 August 2012, UCSB).

Teaching

Information Security - Theory vs. Practice, winter 2011-2012
Operating Systems, winter 2011-2012
Seminar in Information Security, spring 2011

Papers

Gilad Asharov, Abhishek Jain, Adriana López-Alt, Eran Tromer, Vinod Vaikuntanathan, Daniel Wichs, Multiparty computation with low communication, computation and interaction via threshold FHE, proc. Eurocrypt 2012, to appear.
[pdf] (merged version of [ePrint 2011/663] and [ePrint 2011/613])
Shai Shalev-Shwartz, Ohad Shamir, Eran Tromer, Using more data to speed-up training time, proc. International Conference on Artificial Intelligence and Statistics (AISTATS) 2012, to appear.
[arXiv]
Nir Bitansky, Ran Canetti, Alessandro Chiesa, Eran Tromer, From extractable collision resistance to succinct non-Interactive arguments of knowledge, and back again, proc. Innovations in Computer Science (ITCS) 2012, to appear.
[pdf] [ePrint] (extended version)
Sebastian Faust, Tal Rabin, Leonid Reyzin, Eran Tromer, Vinod Vaikuntanathan, Protecting circuits from leakage: the computationally-bounded and noisy cases, proc. Eurocrypt 2010, LNCS 6110, 135-156, Springer, 2010.
[pdf]
Alessandro Chiesa, Eran Tromer, Proof-Carrying Data and Hearsay Arguments from signature cards, proc. Innovations in Computer Science (ICS) 2010, 310--331, Tsinghua University Press, 2010.
[abstract] [pdf]
Thomas Ristenpart, Eran Tromer, Hovav Shacham, Stefan Savage, Hey, you, get off of my cloud! Exploring information leakage in third-party compute clouds, proc. ACM Conference on Computer and Communications Security (CCS) 2009, 199-212, ACM, 2009.
[abstract] [pdf]
Eran Tromer, Dag Arne Osvik, Adi Shamir, Efficient cache attacks on AES, and countermeasures, Journal of Cryptology, vol. 23 no. 1, 37-71, Springer, 2010.
[pdf] (convenient format) ©1 [pdf] (official journal format) ©1
(first presented at the FSE 2005 rump session, February 2005 — see below)
Maxwell Krohn, Eran Tromer, Non-interference for a practical DIFC-based operating system, proc. IEEE Symposium on Security and Privacy 2009, 61-76, IEEE, 2009.
[pdf] [ps.gz] ©2
Ronald L. Rivest, Benjamin Agre, Daniel V. Bailey, Christopher Crutchfield, Yevgeniy Dodis, Kermin Elliott Fleming, Asif Khan, Jayant Krishnamurthy, Yuncheng Lin, Leo Reyzin, Emily Shen, Jim Sukha, Drew Sutherland, Eran Tromer, Yiqun Lisa Yin, The MD6 hash function — a proposal to NIST for SHA-3, submission to the National Institute of Standards and Technology hash function competition, 2008.
[web page] [pdf report]
Sharon Goldberg, David Xiao, Eran Tromer, Boaz Barak, Jennifer Rexford, Path-quality monitoring in the presence of adversaries, proc. SIGMETRICS 2008, 193-204, ACM, 2008.
[pdf] (full version) ©4
Ran Canetti, Ron Rivest, Eran Tromer, Comments on NIST Draft Requirements and Criteria for Hash Algorithm, letter to the National Institute of Standards and Technology, April 2007.
[pdf]
Eran Tromer, Hardware-Based Cryptanalysis, Ph.D. dissertation, 2007.
[web page]
Willi Geiselmann, Adi Shamir, Rainer Steinwandt, Eran Tromer, Fault-tolerance in hardware for sparse systems of linear equations, with applications to integer factorization, Chapter 8 in N. Nedjah, L. de Macedo Mourelle (Eds.), New Trends in Cryptographic Systems, Nova Science Publishers, 2006.
Dag Arne Osvik, Adi Shamir, Eran Tromer, Cache attacks and countermeasures: the case of AES, proc. RSA Conference Cryptographers Track (CT-RSA) 2006, LNCS 3860, 1-20, Springer, 2006.
[pdf] [ps.gz] (extended version) ©3
(see journal version above; first presented at the FSE 2005 rump session, February 2005 — see below)
Willi Geiselmann, Adi Shamir, Rainer Steinwandt, Eran Tromer, Scalable hardware for sparse systems of linear equations, with applications to integer factorization, proc. CHES 2005, LNCS 3659, 131-146, Springer, 2005.
[pdf] [ps.gz] ©1
Willi Geiselmann, Adi Shamir, Rainer Steinwandt, Eran Tromer, A systolic design for supporting Wiedemann's algorithm, invited paper, proc. Workshop on Special Purpose Hardware for Attacking Cryptographic Systems (SHARCS), 13-17, 2005.
(see revised CHES 2005 version above)
Adi Shamir, Eran Tromer, Special-purpose hardware for factoring: the NFS sieving step, proc. Workshop on Special Purpose Hardware for Attacking Cryptographic Systems (SHARCS), 1-12, 2005.
[pdf] [ps.gz] (see slides below)
Willi Geiselmann, Hubert Köpfer, Rainer Steinwandt, Eran Tromer, Improved routing-based linear algebra for the Number Field Sieve, proc. International Conference on Information Technology: Coding and Computing (ITCC'05), Volume 1, 636-641, IEEE, 2005.
[pdf] [ps.gz] ©2
Moni Naor, Asaf Nussboim, Eran Tromer, Efficiently constructible huge graphs that preserve first order properties of random graphs, proc. Theory of Cryptography Conference (TCC) 2005, LNCS 3378, 66-85, Springer, 2005.
[pdf] [ps.gz] ©1
Arjen K. Lenstra, Eran Tromer, Adi Shamir, Wil Kortsmit, Bruce Dodson, James Hughes, Paul Leyland, Factoring estimates for a 1024-bit RSA modulus, proc. Asiacrypt 2003, LNCS 2894, 331-346, Springer, 2003.
[pdf] [ps.gz] ©1
Boaz Barak, Ronen Shaltiel, Eran Tromer, True random number generators secure in a changing environment, proc. CHES 2003, LNCS 2779, 166-180, Springer, 2003.
[pdf] [ps.gz] ©1
Adi Shamir, Eran Tromer, On the cost of factoring RSA-1024, RSA CryptoBytes, vol. 6 no. 2, 10-19, 2003.
[pdf] [ps.gz]
Adi Shamir, Eran Tromer, Factoring large numbers with the TWIRL device, proc. CRYPTO 2003, LNCS 2729, 1-26, Springer, 2003.
[pdf] [ps.gz] ©1 [dedicated webpage]
Arjen K. Lenstra, Adi Shamir, Jim Tomlinson, Eran Tromer, Analysis of Bernstein's factorization circuit, proc. Asiacrypt 2002, LNCS 2501, 1-26, Springer, 2002.
[pdf] [ps.gz] [html] ©1

Presentations

Workshops and conferences, partial list.

Architectural Attacks and their Mitigation by Binary Transformation, ACM Symposium on Operating Systems Principles (SOSP) 2009 work-in-progress session, 2009.
[PDF]
Architectural Side Channels in Cloud Computing, invited talk, Crypto in the Cloud workshop, MIT, August 5 2009.
[PowerPoint] [PDF]
Protecting Circuits from Computationally-Bounded Leakage, invited talk, Crypto in the Cloud workshop, MIT, August 4 2009.
[PowerPoint] [PDF] (see paper above)
MIT CSAIL Industry Affiliates Program, Cloud Computing and Virtualization panel, MIT, May 27, 2009.
Cache-based side channel attacks and their implications, invited talk at the Quo Vadis Cryptography workshop, Warsaw, May 2007.
Invited talks at Microsoft Research Summer School, Indian Institute of Science, 2006.
Cryptanalytic applications of the PlayStation 3: the case of DES, SHARCS 2006 rump session, April 2006.
[PDF]
Special-purpose hardware for factoring, invited talk at the Quo Vadis Cryptography workshop, Warsaw, May 2005.
Other people's cache: Hyper Attacks on HyperThreaded processors, FSE 2005 rump session, February 2005.
Full AES key extraction in 65 milliseconds using cache attacks, Crypto 2005 rump session, August 2005.
[PowerPoint] (see paper above)
Special-Purpose Hardware for Factoring: the NFS sieving step, invited talk at SHARCS 2005, February 2005.
[PowerPoint XP] [PDF without animated illustrations] (see paper above)
Appendix: video of an actual TWINKLE device (joint work with Adi Shamir, Eli Biham and Orr Dunkelman): [avi]
Acoustic cryptanalysis: on nosy people and noisy machines, Eurocrypt 2004 rump session, May 2004.
[web page] (work in progress)
Hardware-based implementations of factoring algorithms, invited talk at ECC 2003, August 2003.
[PowerPoint XP] [PDF without animated illustrations]

Resource pages

Gpcode.ak Cryptographic Challenge
Wonderful Cryptography — topics for a motivational "introduction to cryptography" lecture
Special-purpose cryptanalytic devices — an annotated taxonomy

Old course pages

Secret Key Cryptography (Spring 2006) course page
Public Key Cryptography (Spring 2005) course page
Secret Key Cryptography (Spring 2004) course page
Public Key Cryptography (Spring 2003) course page
Foundations of Cryptography (Winter 2001/2002) course page

Humor

On the design and cryptanalysis of a one-way hash, Journal of Craptology volume 5, 2008.
Presented with Carl Ellison, Victor Miller and Rebecca Wright, CRYPTO 2007 rump session, August 2007.
[PDF]

Affiliated websites

Haayal Hakore

Technical tidbits

pages2pdf: a shell script for converting a bunch of images (say, scanned pages or transparencies), given in any common format, into a single PDF files. Optionally, reduces resolution and includes multiple images per page. See also slides2pdf, an older and somewhat inferior evrsion (which produced these outputs: [1] [2] [3] [4] [5]).
Forcing OpenSSH to use a hard-coded password
Installing Mathematica fonts in Exceed
LyX FAQ
rexecsync: a shell script for saving the output of an arbitrary command on a remote computer into a local file, such that on repeated invocations only differences are transferred (requires librsync).
Java Instrumentation Engine — a flexible Java sourcecode instrumentation program (unmaintained).