Improving SSL Handshake Performance via Batching. - Hovav Shacham; Dan Boneh (CT-RSA, 2001)

Fast-Track Session Establishment for TLS. - Hovav Shacham; Dan Boneh (NDSS, 2002)

Aggregate and Verifiably Encrypted Signatures from Bilinear Maps. - Dan Boneh; Craig Gentry; Ben Lynn; Hovav Shacham (IACR Cryptol. ePrint Arch., 2002)

SiRiUS: Securing Remote Untrusted Storage. - Eu-Jin Goh; Hovav Shacham; Nagendra Modadugu; Dan Boneh (NDSS, 2003)

Sequential Aggregate Signatures from Trapdoor Permutations. - Anna Lysyanskaya; Silvio Micali; Leonid Reyzin; Hovav Shacham (IACR Cryptol. ePrint Arch., 2003)

Group signatures with verifier-local revocation. - Dan Boneh; Hovav Shacham (CCS, 2004)

On the effectiveness of address-space randomization. - Hovav Shacham; Matthew Page; Ben Pfaff; Eu-Jin Goh; Nagendra Modadugu; Dan Boneh (CCS, 2004)

Short Group Signatures. - Dan Boneh; Xavier Boyen; Hovav Shacham (IACR Cryptol. ePrint Arch., 2004)

Short Signatures from the Weil Pairing. - Dan Boneh; Ben Lynn; Hovav Shacham (J. Cryptol., 2004)

Client-side caching for TLS. - Hovav Shacham; Dan Boneh; Eric Rescorla (ACM Trans. Inf. Syst. Secur., 2004)

Forward-Secure Signatures with Untrusted Update. - Xavier Boyen; Hovav Shacham; Emily Shen; Brent Waters (IACR Cryptol. ePrint Arch., 2006)

Sequential Aggregate Signatures and Multisignatures without Random Oracles. - Steve Lu 001; Rafail Ostrovsky; Amit Sahai; Hovav Shacham; Brent Waters (IACR Cryptol. ePrint Arch., 2006)

Efficient Ring Signatures without Random Oracles. - Hovav Shacham; Brent Waters (IACR Cryptol. ePrint Arch., 2006)

New paradigms in signature schemes. - Hovav Shacham (2006)

The geometry of innocent flesh on the bone: return-into-libc without function calls (on the x86). - Hovav Shacham (CCS, 2007)

A Cramer-Shoup Encryption Scheme from the Linear Assumption and from Progressively Weaker Linear Variants. - Hovav Shacham (IACR Cryptol. ePrint Arch., 2007)

The BBG HIBE Has Limited Delegation. - Hovav Shacham (IACR Cryptol. ePrint Arch., 2007)

When good instructions go bad: generalizing return-oriented programming to RISC. - Erik Buchanan; Ryan Roemer; Hovav Shacham; Stefan Savage (CCS, 2008)

You Go to Elections with the Voting System You Have: Stop-Gap Mitigations for Deployed Voting Systems. - J. Alex Halderman; Eric Rescorla; Hovav Shacham; David A. Wagner 001 (EVT, 2008)

Delegatable Anonymous Credentials. - Mira Belenkiy; Jan Camenisch; Melissa Chase; Markulf Kohlweiss; Anna Lysyanskaya; Hovav Shacham (IACR Cryptol. ePrint Arch., 2008)

Reconstructing RSA Private Keys from Random Key Bits. - Nadia Heninger; Hovav Shacham (IACR Cryptol. ePrint Arch., 2008)

Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds. - Thomas Ristenpart; Eran Tromer; Hovav Shacham; Stefan Savage (CCS, 2009)

Randomizable Proofs and Delegatable Anonymous Credentials. - Mira Belenkiy; Jan Camenisch; Melissa Chase; Markulf Kohlweiss; Anna Lysyanskaya; Hovav Shacham (CRYPTO, 2009)

When private keys are public: results from the 2008 Debian OpenSSL vulnerability. - Scott Yilek; Eric Rescorla; Hovav Shacham; Brandon Enright; Stefan Savage (Internet Measurement Conference, 2009)

Can DREs Provide Long-Lasting Security? The Case of Return-Oriented Programming and the AVC Advantage. - Stephen Checkoway; Ariel J. Feldman; Brian Kantor; J. Alex Halderman; Edward W. Felten; Hovav Shacham (EVT/WOTE, 2009)

Return-oriented programming without returns. - Stephen Checkoway; Lucas Davi; Alexandra Dmitrienko; Ahmad-Reza Sadeghi; Hovav Shacham; Marcel Winandy (CCS, 2010)

An empirical study of privacy-violating information flows in JavaScript web applications. - Dongseok Jang; Ranjit Jhala; Sorin Lerner; Hovav Shacham (CCS, 2010)

Are Text-Only Data Formats Safe? Or, Use This LaTeX Class File to Pwn Your Computer. - Stephen Checkoway; Hovav Shacham; Eric Rescorla (LEET, 2010)

Experimental Security Analysis of a Modern Automobile. - Karl Koscher; Alexei Czeskis; Franziska Roesner; Shwetak N. Patel; Tadayoshi Kohno; Stephen Checkoway; Damon McCoy; Brian Kantor; Danny Anderson; Hovav Shacham; Stefan Savage (IEEE Symposium on Security and Privacy, 2010)

OpenScan: A Fully Transparent Optical Scan Voting System. - Kai Wang 059; Eric Rescorla; Hovav Shacham; Serge J. Belongie (EVT/WOTE, 2010)

Limitations on Transformations from Composite-Order to Prime-Order Groups: The Case of Round-Optimal Blind Signatures. - Sarah Meiklejohn; Hovav Shacham; David Mandell Freeman (IACR Cryptol. ePrint Arch., 2010)

Don't Take LaTeX Files from Strangers. - Stephen Checkoway; Hovav Shacham; Eric Rescorla (login Usenix Mag., 2010)

Do you know where your cloud files are? - Karyn Benson; Rafael Dowsley; Hovav Shacham (CCSW, 2011)

Eliminating fine grained timers in Xen. - Bhanu Chandra Vattikonda; Sambit Das; Hovav Shacham (CCSW, 2011)

Careful with Composition: Limitations of the Indifferentiability Framework. - Thomas Ristenpart; Hovav Shacham; Thomas Shrimpton (EUROCRYPT, 2011)

Comprehensive Experimental Analyses of Automotive Attack Surfaces. - Stephen Checkoway; Damon McCoy; Brian Kantor; Danny Anderson; Hovav Shacham; Stefan Savage; Karl Koscher; Alexei Czeskis; Franziska Roesner; Tadayoshi Kohno (USENIX Security Symposium, 2011)

The Phantom Tollbooth: Privacy-Preserving Electronic Toll Collection in the Presence of Driver Collusion. - Sarah Meiklejohn; Keaton Mowery; Stephen Checkoway; Hovav Shacham (USENIX Security Symposium, 2011)

Careful with Composition: Limitations of Indifferentiability and Universal Composability. - Thomas Ristenpart; Hovav Shacham; Thomas Shrimpton (IACR Cryptol. ePrint Arch., 2011)

Are AES x86 cache timing attacks still feasible? - Keaton Mowery; Sriram Keelveedhi; Hovav Shacham (CCSW, 2012)

Hedged Public-key Encryption: How to Protect against Bad Randomness. - Mihir Bellare; Zvika Brakerski; Moni Naor; Thomas Ristenpart; Gil Segev 001; Hovav Shacham; Scott Yilek (IACR Cryptol. ePrint Arch., 2012)

The k-BDH Assumption Family: Bilinear Map Cryptography from Progressively Weaker Assumptions. - Karyn Benson; Hovav Shacham; Brent Waters (IACR Cryptol. ePrint Arch., 2012)

Return-Oriented Programming: Systems, Languages, and Applications. - Ryan Roemer; Erik Buchanan; Hovav Shacham; Stefan Savage (ACM Trans. Inf. Syst. Secur., 2012)

Iago attacks: why the system call API is a bad untrusted RPC interface. - Stephen Checkoway; Hovav Shacham (ASPLOS, 2013)

Welcome to the Entropics: Boot-Time Entropy in Embedded Devices. - Keaton Mowery; Michael Yung Chung Wei; David Kohlbrenner; Hovav Shacham; Steven Swanson (IEEE Symposium on Security and Privacy, 2013)

Measuring the Practical Impact of DNSSEC Deployment. - Wilson Lian; Eric Rescorla; Hovav Shacham; Stefan Savage (USENIX Security Symposium, 2013)

New Trapdoor Projection Maps for Composite-Order Bilinear Groups. - Sarah Meiklejohn; Hovav Shacham (IACR Cryptol. ePrint Arch., 2013)

Sequential Aggregate Signatures, Multisignatures, and Verifiably Encrypted Signatures Without Random Oracles. - Steve Lu 001; Rafail Ostrovsky; Amit Sahai; Hovav Shacham; Brent Waters (J. Cryptol., 2013)

Compact Proofs of Retrievability. - Hovav Shacham; Brent Waters (J. Cryptol., 2013)

Rethinking Verifiably Encrypted Signatures: A Gap in Functionality and Potential Solutions. - Theresa Calderon; Sarah Meiklejohn; Hovav Shacham; Brent Waters (CT-RSA, 2014)

On the Practical Exploitability of Dual EC in TLS Implementations. - Stephen Checkoway; Ruben Niederhagen; Adam Everspaugh; Matthew Green 001; Tanja Lange 001; Thomas Ristenpart; Daniel J. Bernstein; Jake Maskiewicz; Hovav Shacham; Matthew Fredrikson (USENIX Security Symposium, 2014)

Security Analysis of a Full-Body Scanner. - Keaton Mowery; Eric Wustrow; Tom Wypych; Corey Singleton; Chris Comfort; Eric Rescorla; J. Alex Halderman; Hovav Shacham; Stephen Checkoway (USENIX Security Symposium, 2014)

Mouse Trap: Exploiting Firmware Updates in USB Peripherals. - Jacob Maskiewicz; Benjamin Ellis; James Mouradian; Hovav Shacham (WOOT, 2014)

Too LeJIT to Quit: Extending JIT Spraying to ARM. - Wilson Lian; Hovav Shacham; Stefan Savage (NDSS, 2015)

On Subnormal Floating Point and Abnormal Timing. - Marc Andrysco; David Kohlbrenner; Keaton Mowery; Ranjit Jhala; Sorin Lerner; Hovav Shacham (IEEE Symposium on Security and Privacy, 2015)

HIPStR: Heterogeneous-ISA Program State Relocation. - Ashish Venkat; Sriskanda Shamasunder; Hovav Shacham; Dean M. Tullsen (ASPLOS, 2016)

A Systematic Analysis of the Juniper Dual EC Incident. - Stephen Checkoway; Jacob Maskiewicz; Christina Garman; Joshua Fried; Shaanan Cohney; Matthew Green 001; Nadia Heninger; Ralf-Philipp Weinmann; Eric Rescorla; Hovav Shacham (CCS, 2016)

Trusted Browsers for Uncertain Times. - David Kohlbrenner; Hovav Shacham (USENIX Security Symposium, 2016)

A Systematic Analysis of the Juniper Dual EC Incident. - Stephen Checkoway; Shaanan Cohney; Christina Garman; Matthew Green 001; Nadia Heninger; Jacob Maskiewicz; Eric Rescorla; Hovav Shacham; Ralf-Philipp Weinmann (IACR Cryptol. ePrint Arch., 2016)

On the (In)effectiveness of Mosaicing and Blurring as Tools for Document Redaction. - Steven Hill; Zhimin Zhou; Lawrence K. Saul; Hovav Shacham (Proc. Priv. Enhancing Technol., 2016)

A Call to ARMs: Understanding the Costs and Benefits of JIT Spraying Mitigations. - Wilson Lian; Hovav Shacham; Stefan Savage (NDSS, 2017)

On the effectiveness of mitigations against floating-point timing channels. - David Kohlbrenner; Hovav Shacham (USENIX Security Symposium, 2017)

Short Unique Signatures from RSA with a Tight Security Reduction (in the Random Oracle Model). - Hovav Shacham (Financial Cryptography, 2018)

Where did I leave my keys?: lessons from the Juniper Dual EC incident. - Stephen Checkoway; Jacob Maskiewicz; Christina Garman; Joshua Fried; Shaanan Cohney; Matthew Green 001; Nadia Heninger; Ralf-Philipp Weinmann; Eric Rescorla; Hovav Shacham (Commun. ACM, 2018)

Gobi: WebAssembly as a Practical Path to Library Sandboxing. - Shravan Narayan; Tal Garfinkel; Sorin Lerner; Hovav Shacham; Deian Stefan (CoRR, 2019)

Towards a verified range analysis for JavaScript JITs. - Fraser Brown; John Renner; Andres Nötzli; Sorin Lerner; Hovav Shacham; Deian Stefan (PLDI, 2020)

Retrofitting Fine Grain Isolation in the Firefox Renderer. - Shravan Narayan; Craig Disselkoen; Tal Garfinkel; Nathan Froyd; Eric Rahm; Sorin Lerner; Hovav Shacham; Deian Stefan (USENIX Security Symposium, 2020)

Retrofitting Fine Grain Isolation in the Firefox Renderer (Extended Version). - Shravan Narayan; Craig Disselkoen; Tal Garfinkel; Nathan Froyd; Eric Rahm; Sorin Lerner; Hovav Shacham; Deian Stefan (CoRR, 2020)

Return-Oriented Programming in RISC-V. - Garrett Gu; Hovav Shacham (CoRR, 2020)

Automated policy synthesis for system call sandboxing. - Shankara Pailoor; Xinyu Wang 006; Hovav Shacham; Isil Dillig (Proc. ACM Program. Lang., 2020)

The Road to Less Trusted Code: Lowering the Barrier to In-Process Sandboxing. - Tal Garfinkel; Shravan Narayan; Craig Disselkoen; Hovav Shacham; Deian Stefan (login Usenix Mag., 2020)

Swivel: Hardening WebAssembly against Spectre. - Shravan Narayan; Craig Disselkoen; Daniel Moghimi; Sunjay Cauligi; Evan Johnson 001; Zhao Gang; Anjo Vahldiek-Oberwagner; Ravi Sahita; Hovav Shacham; Dean M. Tullsen; Deian Stefan (USENIX Security Symposium, 2021)

DVFS Frequently Leaks Secrets: Hertzbleed Attacks Beyond SIKE, Cryptography, and CPU-Only Data. - Yingchen Wang; Riccardo Paccagnella; Alan Wandke; Zhao Gang; Grant Garrett-Grossman; Christopher W. Fletcher; David Kohlbrenner; Hovav Shacham (SP, 2023)

Checking Passwords on Leaky Computers: A Side Channel Analysis of Chrome's Password Leak Detect Protocol. - Andrew Kwong; Walter Wang; Jason Kim 007; Jonathan Berger; Daniel Genkin; Eyal Ronen; Hovav Shacham; Riad S. Wahby; Yuval Yarom (USENIX Security Symposium, 2023)

The Most Dangerous Codec in the World: Finding and Exploiting Vulnerabilities in H.264 Decoders. - Willy R. Vasquez; Stephen Checkoway; Hovav Shacham (USENIX Security Symposium, 2023)

Constant-Time Wasmtime, for Real This Time: End-to-End Verified Zero-Overhead Constant-Time Programming for the Web and Beyond. - Garrett Gu; Hovav Shacham (CoRR, 2023)

Hertzbleed: Turning Power Side-Channel Attacks Into Remote Timing Attacks on x86. - Yingchen Wang; Riccardo Paccagnella; Elizabeth Tang He; Hovav Shacham; Christopher W. Fletcher; David Kohlbrenner (IEEE Micro, 2023)

Icarus: Trustworthy Just-In-Time Compilers with Symbolic Meta-Execution. - Naomi Smith; Abhishek Sharma; John Renner; David Thien; Fraser Brown; Hovav Shacham; Ranjit Jhala; Deian Stefan (SOSP, 2024)

GPU.zip: On the Side-Channel Implications of Hardware-Based Graphical Data Compression. - Yingchen Wang; Riccardo Paccagnella; Zhao Gang; Willy R. Vasquez; David Kohlbrenner; Hovav Shacham; Christopher W. Fletcher (SP, 2024)

Pixel Thief: Exploiting SVG Filter Leakage in Firefox and Chrome. - Sioli O'Connell; Lishay Aben Sour; Ron Magen; Daniel Genkin; Yossi Oren; Hovav Shacham; Yuval Yarom (USENIX Security Symposium, 2024)