Paul Kocher

Paul Kocher
Name	Paul Kocher
Birth date	1970s
Birth place	United States
Nationality	American
Occupation	Cryptographer; Entrepreneur; Researcher
Known for	Side-channel attack research; SSL/TLS analysis; Cryptographic engineering

Paul Kocher is an American cryptographer and entrepreneur noted for pioneering work on side-channel attacks, timing attacks, and practical implementations of secure protocols. He has contributed to cryptographic engineering, secure hardware design, and protocol analysis across academic, commercial, and standards settings. His work influenced implementations of public-key cryptography, secure processors, and widely used protocols.

Early life and education

Born in the United States, Kocher completed undergraduate studies in the 1990s and pursued graduate-level research that bridged applied cryptography and computer engineering. During his formative years he engaged with communities around RSA (cryptosystem), Diffie–Hellman key exchange, Public-key cryptography, and research groups associated with institutions such as Massachusetts Institute of Technology, Stanford University, and University of California, Berkeley. Early collaborations and mentorships connected him to researchers from Bell Labs, IBM Research, and the National Security Agency technical community.

Career and research

Kocher co-founded and led technology ventures that translated cryptographic research into commercial products and services, interacting with companies like Intel, Microsoft, Netscape Communications Corporation, Sun Microsystems, and Google. He worked on the implementation and analysis of secure communication standards including Secure Sockets Layer, Transport Layer Security, and public-key libraries used by projects such as OpenSSL and LibreSSL. Kocher collaborated with academic and industry teams studying hardware security at organizations like Cryptography Research, Inc., Cryptography Research Division at Rambus, and research groups associated with Carnegie Mellon University and Caltech.

His research encompassed practical attacks and defenses applicable to smart cards, processors, and embedded devices from vendors including ARM Holdings, Intel Corporation, and NXP Semiconductors. He published analyses relevant to standards bodies such as the Internet Engineering Task Force, National Institute of Standards and Technology, and contributed to discussions affecting protocols used by Apple Inc., Amazon Web Services, and Mozilla Foundation.

Contributions to cryptography

Kocher is best known for identifying and demonstrating classes of implementation attacks that exploit information leakage from physical devices. He introduced and developed techniques in timing attacks and power analysis that influenced design and countermeasures for cryptographic primitives like RSA (cryptosystem), Elliptic-curve cryptography, and Advanced Encryption Standard. His work showed practical vulnerabilities in implementations of PKCS #1, X.509, and other widely deployed formats and libraries, prompting revisions in libraries used by OpenSSH, GnuPG, and LibreOffice.

He played a central role in bringing attention to side-channel analysis methods—timing attacks, simple power analysis, and differential power analysis—that affected devices ranging from smart cards to general-purpose processors. These findings led to changes in CPU microarchitecture mitigations, influencing vendors such as AMD and Intel. Kocher’s contributions also intersected with research on protocol-level weaknesses exploited in incidents involving BEAST attack, POODLE attack, and broader discussions around cryptographic protocol robustness advocated by Bruce Schneier, Ronald Rivest, and Adi Shamir.

Notable publications and patents

Kocher authored and co-authored influential papers and technical reports on side-channel attacks, secure implementations, and protocol analysis that appeared in conferences and workshops such as CRYPTO, Eurocrypt, USENIX Security Symposium, and CryptoBytes. He holds patents and technical disclosures related to side-channel countermeasures, tamper-resistant hardware, and secure key management techniques used by semiconductor vendors and security firms. His publications influenced standards and implemented countermeasures adopted in products from Rambus, Infineon Technologies, and STMicroelectronics.

Representative works cover timing attack methodologies against RSA (cryptosystem), power analysis techniques for embedded cryptosystems, and practical guidance for mitigating leakage in implementations used by Visa, Mastercard, and payment terminal manufacturers. He collaborated with other researchers who have published alongside names associated with MITRE Corporation, SRI International, and university labs at ETH Zurich.

Awards and recognition

Kocher has received recognition from industry and academic circles for his impact on applied cryptography and hardware security. His contributions have been cited by standards bodies such as NIST and referenced in security advisories by vendors including Microsoft Corporation and Oracle Corporation. He has been invited to speak at major conferences organized by Black Hat, DEF CON, RSA Conference, and academic venues like IEEE Symposium on Security and Privacy. His influence is acknowledged in historical overviews and textbooks by authors including Serge Vaudenay and Victor Shoup.

Category:American cryptographers Category:Computer security researchers