EDBT 2026 Demo / reviewers in the wild / expert
Robbie Dumitru
dblp:251/5347-2 · also Robert Dumitru 0002
· DBLP profile ↗
4ranked-venue papers
2as first author
4since 2021 · last 2026
0000-0001-5605-8082ORCID · verified
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 4 · 2 first-author · 4 since 2021
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2026 | Chypnosis: Undervolting-based Static Side-channel AttacksabstractStatic side-channel analysis attacks, which rely on a stopped clock to extract sensitive information, pose a growing threat to embedded systems' security. To protect against such attacks, several proposed defenses aim to detect unexpected variations in the clock signal and clear sensitive states. In this work, we present \emph{Chypnosis}, an undervolting attack technique that indirectly stops the target circuit clock, while retaining stored data. Crucially, Chypnosis also blocks the state clearing stage of prior defenses, allowing recovery of secret information even in their presence. However, basic undervolting is not sufficient in the presence of voltage sensors designed to handle fault injection via voltage tampering. To overcome such defenses, we observe that rapidly dropping the supply voltage can disable the response mechanism of voltage sensor systems. We implement Chypnosis on various FPGAs, demonstrating the successful bypass of their sensors, both in the form of soft and hard IPs. To highlight the real-world applicability of Chypnosis, we show that the alert handler of the OpenTitan root-of-trust, responsible for providing hardware responses to threats, can be bypassed. Furthermore, we demonstrate that by combining Chypnosis with static side-channel analysis techniques, namely laser logic state imaging (LLSI) and impedance analysis (IA), we can extract sensitive information from a side-channel protected cryptographic module used in OpenTitan, even in the presence of established clock and voltage sensors. Finally, we propose and implement an improvement to an established FPGA-compatible clock detection countermeasure, and we validate its resilience against Chypnosis. Kyle Mitard, Saleh Khalaj Monfared, Fatemeh Khojasteh Dana, Robbie Dumitru, Yuval Yarom, Shahin Tajik |
SP | 4 |
| 2025 | Reverse-Engineering the Address Translation Caches
Philipp Ertmer, Robbie Dumitru, Yuval Yarom |
DIMVA (1) | 2 |
| 2025 | On Borrowed Time - Preventing Static Side-Channel Analysis
Robbie Dumitru, Thorben Moos, Andrew Wabnitz, Yuval Yarom |
NDSS | 1 |
| 2023 | The Impostor Among US(B): Off-Path Injection Attacks on USB Communications
Robbie Dumitru, Daniel Genkin, Andrew Wabnitz, Yuval Yarom |
USENIX Security Symposium | 1 |