His research spans cryptography, security protocol design, security economics, and human factors in security. He's interested in making systems more trustworthy and transparent, particularly encrypted communication tools, cryptocurrencies, and HTTPS and PKI on the web. His past research has spanned passwords and authentication, side-channel cryptanalysis, protocol verification, software obfuscation, and privacy in social networks.