His research focuses on cryptography, specifically the security of cryptographic primitives and their application in real-world systems. He is the author of numerous technical papers in the field as well as several patents. At Stanford he leads a number of security-based projects on topics such as intrusion tolerance and security applications for handheld devices. His recent research topics have also included studying the underlying mathematical security of the RSA algorithm and testing real-world systems for vulnerabilities to timing attack cryptanalysis.