Robbie Dumitru

dblp:251/5347-2 · also Robert Dumitru 0002 · DBLP profile ↗
← Back
4ranked-venue papers
2as first author
4since 2021 · last 2026
0000-0001-5605-8082ORCID · verified

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 4 · 2 first-author · 4 since 2021
YearPublicationVenuePosition
2026 Chypnosis: Undervolting-based Static Side-channel Attacks
abstract
Static side-channel analysis attacks, which rely on a stopped clock to extract sensitive information, pose a growing threat to embedded systems' security. To protect against such attacks, several proposed defenses aim to detect unexpected variations in the clock signal and clear sensitive states. In this work, we present \emph{Chypnosis}, an undervolting attack technique that indirectly stops the target circuit clock, while retaining stored data. Crucially, Chypnosis also blocks the state clearing stage of prior defenses, allowing recovery of secret information even in their presence. However, basic undervolting is not sufficient in the presence of voltage sensors designed to handle fault injection via voltage tampering. To overcome such defenses, we observe that rapidly dropping the supply voltage can disable the response mechanism of voltage sensor systems. We implement Chypnosis on various FPGAs, demonstrating the successful bypass of their sensors, both in the form of soft and hard IPs. To highlight the real-world applicability of Chypnosis, we show that the alert handler of the OpenTitan root-of-trust, responsible for providing hardware responses to threats, can be bypassed. Furthermore, we demonstrate that by combining Chypnosis with static side-channel analysis techniques, namely laser logic state imaging (LLSI) and impedance analysis (IA), we can extract sensitive information from a side-channel protected cryptographic module used in OpenTitan, even in the presence of established clock and voltage sensors. Finally, we propose and implement an improvement to an established FPGA-compatible clock detection countermeasure, and we validate its resilience against Chypnosis.
Kyle Mitard, Saleh Khalaj Monfared, Fatemeh Khojasteh Dana, Robbie Dumitru, Yuval Yarom, Shahin Tajik
SP4
2025 Reverse-Engineering the Address Translation Caches
Philipp Ertmer, Robbie Dumitru, Yuval Yarom
DIMVA (1)2
2025 On Borrowed Time - Preventing Static Side-Channel Analysis
Robbie Dumitru, Thorben Moos, Andrew Wabnitz, Yuval Yarom
NDSS1
2023 The Impostor Among US(B): Off-Path Injection Attacks on USB Communications
Robbie Dumitru, Daniel Genkin, Andrew Wabnitz, Yuval Yarom
USENIX Security Symposium1