Eran Tromer (ערן טרומר)

Senior Lecturer (assistant professor), 

Blavatnik School of Computer Science
Tel Aviv University

Codirector, Check Point Institute for Information Security (CPIIS)
Head, Laboratory for Experimental Information Security (LEISec)
Member, Israeli Center of Research Excellence in Algorithms (I-CORE Algo)

Teaching

• Introduction to Information Security
• Spring 2014
• Spring 2013
  
• Workshop in Information Security
• Spring 2014
• Spring 2013
• Spring 2012
• Information Security - Theory vs. Reality, winter
  
• Winter 2013-2014
• Winter 2012-2013
• Winter 2011-2012
• Operating Systems, winter 2011-2012
  
• Seminar in Information Security, spring 2011

Papers

• Nir Bitansky, Ran Canetti, Alessandro Chiesa, Shafi Goldwasser, Huijia Lin, Aviad Rubinstein, Eran Tromer, The hunting of the SNARK, preprint.
      [eprint]
• Sharon Goldberg, David Xiao, Eran Tromer, Boaz Barak, Jennifer Rexford, Path-quality monitoring in the presence of adversaries: the secure sketch protocol, IEEE/ACM Transactions on Networking, to appear.
• Sebastian Faust, Tal Rabin, Leonid Reyzin, Eran Tromer, Vinod Vaikuntanathan, Protecting circuits from computationally bounded and noisy leakage, SIAM Journal on Computing (SICOMP), to appear.
      [pdf] [eprint]
• Daniel Genkin, Adi Shamir, Eran Tromer, Get your hands off my laptop: physical side-channel key-extraction attacks on PCs, proc. Workshop on Cryptographic Hardware and Embedded Systems (CHES) 2014, to appear.
• Eli Ben-Sasson, Alessandro Chiesa, Eran Tromer, Madars Virza, Scalable succinct non-interactive arguments via cycles of elliptic curves, proc. CRYPTO 2014, to appear.
• Daniel Genkin, Adi Shamir, Eran Tromer, RSA key extraction via low-bandwidth acoustic cryptanalysis, proc. CRYPTO 2014, to appear.
      [pdf] [eprint] [web page with summary and Q&A]
• Eli Ben-Sasson,  Alessandro Chiesa, Eran Tromer, Madars Virza, Succinct non-interactive arguments for a von Neumann architecture, proc. USENIX Security 2014, to appear.
      [pdf] [eprint]
• Eli Ben-Sasson, Alessandro Chiesa, Christina Garman, Matthew Green, Ian Miers, Eran Tromer, Madars Virza, Zerocash: decentralized anonymous payments from Bitcoin, proc. IEEE Symposium on Security & Privacy (Oakland) 2014, to appear.
     [pdf: conference version]  [pdf: extended version] [eprint] [web page with summary and Q&A]
  
• Stephen Chong, Eran Tromer, Jeffrey A. Vaughan, Enforcing language semantics using proof-carrying data, preprint.
      [pdf] [eprint]
• Daniel Genkin, Yuval Ishai, Manoj M. Prabhakaran, Amit Sahai, Eran  Tromer, Circuits resilient to additive attacks with applications to secure computation, proc. Symposium on Theory of Computing (STOC) 2014, to appear.
• Eli Ben-Sasson, Alessandro Chiesa, Daniel Genkin, Eran Tromer, Madars Virza, SNARKs for C: verifying program executions succinctly and in zero knowledge , proc. CRYPTO 2013, Part II, LNCS 8043, 90-108, Springer, 2013.
    Extended version: [pdf] [eprint]
• Eli Ben-Sasson, Alessandro Chiesa, Daniel Genkin, Eran Tromer, On the concrete-efficiency threshold of probabilistically-checkable proofs, proc. Symposium on Theory of Computing (STOC) 2013, 585-594, ACM, 2013.
      [ECCC]
• Nir Bitansky, Ran Canetti, Alessandro Chiesa, Eran Tromer, Recursive composition and bootstrapping for SNARKs and proof-carrying data, proc. Symposium on Theory of Computing (STOC) 2013, 111-120, ACM, 2013.
      [pdf] [eprint]
• Ory Samorodnitzky, Eran Tromer, Avishai Wool, Analyzing unique-bid auction sites for fun and profit, proc. Network & Distributed System Security Symposium (NDSS) 2013, 2013.
      [pdf] [on conference site]
• Eli Ben-Sasson, Alessandro Chiesa, Daniel Genkin, Eran Tromer, Fast reductions from RAMs to delegatable succinct constraint satisfaction problems, proc. Innovations in Theoretical Computer Science (ITCS) 2013, 401-414, ACM, 2013.
      Preprint: [pdf] [eprint]
• Adriana López-Alt, Eran Tromer, Vinod Vaikuntanathan, On-the-fly multiparty computation on the cloud via multikey fully homomorphic encryption, proc. Symposium on Theory of Computing (STOC) 2012, 1219-1234, ACM, 2012.
      [eprint] (extended version)
• Gilad Asharov, Abhishek Jain, Adriana López-Alt, Eran Tromer, Vinod Vaikuntanathan, Daniel Wichs, Multiparty computation with low communication, computation and interaction via threshold FHE, proc. Eurocrypt 2012, LNCS 7237, 483-501, 2012.
      [pdf] (merged version of [eprint 2011/663] and [eprint 2011/613])
• Alessandro Chiesa, Eran Tromer, Proof-carrying data: Secure computation on untrusted platforms, The Next Wave, vol. 19 no. 2, National Security Agency, 2012.
      [local pdf] [NSA pdf]
• Shai Shalev-Shwartz, Ohad Shamir, Eran Tromer, Using more data to speed-up training time, proc. International Conference on Artificial Intelligence and Statistics (AISTATS) 2012,  Journal of Machine Learning Research, vol. 22, 1019-1027,  Microtome Publishing, 2012.
      [arXiv]
• Nir Bitansky, Ran Canetti, Alessandro Chiesa, Eran Tromer, From extractable collision resistance to succinct non-Interactive arguments of knowledge, and back again, proc. Innovations in Computer Science (ITCS) 2012, 326-349, ACM, 2012.
      [pdf] [eprint] (extended version)
• Sebastian Faust, Tal Rabin, Leonid Reyzin, Eran Tromer, Vinod Vaikuntanathan, Protecting circuits from leakage: the computationally-bounded and noisy cases, proc. Eurocrypt 2010, LNCS 6110, 135-156, Springer, 2010.
      [pdf]
• Alessandro Chiesa, Eran Tromer, Proof-carrying data and hearsay arguments from signature cards, proc. Innovations in Theoretical Computer Science (ITCS) 2010, 310--331, Tsinghua University Press, 2010.
      [abstract] [pdf]
• Thomas Ristenpart, Eran Tromer, Hovav Shacham, Stefan Savage, Hey, you, get off of my cloud! Exploring information leakage in third-party compute clouds, proc. ACM Conference on Computer and Communications Security (CCS) 2009, 199-212, ACM, 2009.
      [abstract] [pdf]
• Eran Tromer, Dag Arne Osvik, Adi Shamir, Efficient cache attacks on AES, and countermeasures, Journal of Cryptology, vol. 23 no. 1, 37-71, Springer, 2010.
     [pdf] (convenient format)   [pdf] (official journal format)
  (first presented at the FSE 2005 rump session, February 2005 — see below)
• Maxwell Krohn, Eran Tromer, Non-interference for a practical DIFC-based operating system, proc. IEEE Symposium on Security and Privacy (Oakland) 2009, 61-76, IEEE, 2009.
      [pdf] [ps.gz]
• Ronald L. Rivest, Benjamin Agre, Daniel V. Bailey, Christopher Crutchfield, Yevgeniy Dodis, Kermin Elliott Fleming, Asif Khan, Jayant Krishnamurthy, Yuncheng Lin, Leo Reyzin, Emily Shen, Jim Sukha, Drew Sutherland, Eran Tromer, Yiqun Lisa Yin, The MD6 hash function — a proposal to NIST for SHA-3, submission to the National Institute of Standards and Technology hash function competition, 2008.
      [web page] [pdf report]
• Sharon Goldberg, David Xiao, Eran Tromer, Boaz Barak, Jennifer Rexford, Path-quality monitoring in the presence of adversaries, proc. SIGMETRICS 2008, 193-204, ACM, 2008.
     [pdf] (full version)
• Ran Canetti, Ron Rivest, Eran Tromer, Comments on NIST Draft Requirements and Criteria for Hash Algorithm, letter to the National Institute of Standards and Technology, April 2007.
      [pdf]
• Eran Tromer, Hardware-Based Cryptanalysis, Ph.D. dissertation, 2007.
      [web page]
• Willi Geiselmann, Adi Shamir, Rainer Steinwandt, Eran Tromer, Fault-tolerance in hardware for sparse systems of linear equations, with applications to integer factorization, Chapter 8 in N. Nedjah, L. de Macedo Mourelle (Eds.), New Trends in Cryptographic Systems, Nova Science Publishers, 2006.
• Dag Arne Osvik, Adi Shamir, Eran Tromer, Cache attacks and countermeasures: the case of AES, proc. RSA Conference Cryptographers Track (CT-RSA) 2006, LNCS 3860, 1-20, Springer, 2006.
     [pdf] [ps.gz] (extended version)
  (see journal version above; first presented at the FSE 2005 rump session, February 2005 — see below)
• Willi Geiselmann, Adi Shamir, Rainer Steinwandt, Eran Tromer, Scalable Hardware for Sparse Systems of Linear Equations, with Applications to Integer Factorization, proc. Workshop on Cryptographic Hardware and Embedded Systems (CHES) 2005, LNCS 3659, 131-146, Springer, 2005.
      [pdf] [ps.gz]
• Willi Geiselmann, Adi Shamir, Rainer Steinwandt, Eran Tromer, A systolic design for supporting Wiedemann's algorithm, invited paper, proc. Workshop on Special Purpose Hardware for Attacking Cryptographic Systems (SHARCS), 13-17, 2005.
     (see revised CHES 2005 version above)
• Adi Shamir, Eran Tromer, Special-purpose hardware for factoring: the NFS sieving step, proc. Workshop on Special Purpose Hardware for Attacking Cryptographic Systems (SHARCS), 1-12, 2005.
      [pdf] [ps.gz] (see slides below)
• Willi Geiselmann, Hubert Köpfer, Rainer Steinwandt, Eran Tromer, Improved routing-based linear algebra for the Number Field Sieve, proc. International Conference on Information Technology: Coding and Computing (ITCC'05), Volume 1, 636-641, IEEE, 2005.
     [pdf] [ps.gz]
• Moni Naor, Asaf Nussboim, Eran Tromer, Efficiently constructible huge graphs that preserve first order properties of random graphs, proc. Theory of Cryptography Conference (TCC) 2005, LNCS 3378, 66-85, Springer, 2005.
     [pdf] [ps.gz]
• Arjen K. Lenstra, Eran Tromer, Adi Shamir, Wil Kortsmit, Bruce Dodson, James Hughes, Paul Leyland, Factoring estimates for a 1024-bit RSA modulus, proc. Asiacrypt 2003, LNCS 2894, 331-346, Springer, 2003.
     [pdf] [ps.gz]
• Boaz Barak, Ronen Shaltiel, Eran Tromer, True random number generators secure in a changing environment, proc. Workshop on Cryptographic Hardware and Embedded Systems (CHES) 2003, LNCS 2779, 166-180, Springer, 2003.
     [pdf] [ps.gz]
• Adi Shamir, Eran Tromer, On the cost of factoring RSA-1024, RSA CryptoBytes, vol. 6 no. 2, 10-19, 2003.
      [pdf] [ps.gz]
• Adi Shamir, Eran Tromer, Factoring large numbers with the TWIRL device, proc. CRYPTO 2003, LNCS 2729, 1-26, Springer, 2003.
      [pdf] [ps.gz]    [dedicated webpage]
• Arjen K. Lenstra, Adi Shamir, Jim Tomlinson, Eran Tromer, Analysis of Bernstein's factorization circuit, proc. Asiacrypt 2002, LNCS 2501, 1-26, Springer, 2002.
      [pdf] [ps.gz] [html]

Presentations

• Integrity in Car-Computing: a Cryptographic Vision for Integrity in Vehicle Networks, Transportation CyberSecurity, Tel Aviv 2014, Feb 2014.
      [PowerPoint] [pdf]
  
• The Dread, Deed and Dream of Cyber-Security, Kavli Frontiers of Science Israeli-American Symposium, organized by the Israel Academy of Science and Humanities and U.S. National Academy of Sciences, June 2013.
      [video]
• Architectural Attacks and their Mitigation by Binary Transformation, ACM Symposium on Operating Systems Principles (SOSP) 2009 work-in-progress session, 2009.
      [pdf]
• Architectural Side Channels in Cloud Computing, invited talk, Crypto in the Cloud workshop, MIT, August 5 2009.
      [PowerPoint] [pdf]
• Protecting Circuits from Computationally-Bounded Leakage, invited talk, Crypto in the Cloud workshop, MIT, August 4 2009.
      [PowerPoint] [pdf] (see paper above)
• MIT CSAIL Industry Affiliates Program, Cloud Computing and Virtualization panel, MIT, May 27, 2009.
• Cache-based side channel attacks and their implications, invited talk at the Quo Vadis Cryptography workshop, Warsaw, May 2007.
• Invited talks at Microsoft Research Summer School, Indian Institute of Science, 2006.
• Cryptanalytic applications of the PlayStation 3: the case of DES, SHARCS 2006 rump session, April 2006.
      [pdf]
• Special-purpose hardware for factoring, invited talk at the Quo Vadis Cryptography workshop, Warsaw, May 2005.
• Other people's cache: Hyper Attacks on HyperThreaded processors, FSE 2005 rump session, February 2005.
  Full AES key extraction in 65 milliseconds using cache attacks, Crypto 2005 rump session, August 2005.
      [PowerPoint] (see paper above)
• Special-Purpose Hardware for Factoring: the NFS sieving step, invited talk at SHARCS 2005, February 2005.
      [PowerPoint XP] [PDF without animated illustrations] (see paper above)
      Appendix: video of an actual TWINKLE device (joint work with Adi Shamir, Eli Biham and Orr Dunkelman): [avi]
• Acoustic cryptanalysis: on nosy people and noisy machines, Eurocrypt 2004 rump session, May 2004.
      [web page]
• Hardware-based implementations of factoring algorithms, invited talk at ECC 2003, August 2003.
      [PowerPoint XP] [PDF without animated illustrations]

Resource pages

• Gpcode.ak Cryptographic Challenge
  
• Wonderful Cryptography — topics for a motivational "introduction to cryptography" lecture
  
• Special-purpose cryptanalytic devices — an annotated taxonomy

Humor

• On the design and cryptanalysis of a one-way hash, Journal of Craptology volume 5, 2008.
  Presented with Carl Ellison, Victor Miller and Rebecca Wright, CRYPTO 2007 rump session, August 2007.
     [pdf]

Affiliated websites

• Haayal Hakore (founded/operator)