Publications

• CHERI UNCHAINED: Generic Instruction and Register Control for CHERI Capabilities

  Moritz Waser, Lukas Lamster, David Schrammel, Martin Unterguggenberger, Stefan Mangard
  ARES, 2025

  PDF

• FatPTE-Expanding Page Table Entries for Security

  Lukas Lamster, Martin Unterguggenberger, Moritz Waser, David Schrammel, Stefan Mangard
  ARES, 2025

  PDF

• FAULTLESS: Flexible and Transparent Fault Protection for Superscalar RISC-V Processors

  Moritz Waser, David Schrammel, Robert Schilling, Stefan Mangard
  DIMVA, 2025

  PDF

• Cryptographic Least Privilege Enforcement for Scalable Memory Isolation

  Martin Unterguggenberger, David Schrammel, Lukas Maar, Lukas Lamster, Vedad Hadžić, Stefan Mangard
  HOST, 2025

  PDF

• TME-Box: Scalable In-Process Isolation through Intel TME-MK Memory Encryption

  Martin Unterguggenberger, Lukas Lamster, David Schrammel, Martin Schwarzl, Stefan Mangard
  NDSS, 2025

  PDF Slides

• Memory Tagging using Cryptographic Integrity on Commodity x86 CPUs

  David Schrammel, Martin Unterguggenberger, Lukas Lamster, Salmin Sultana, Karanvir Grewal, Michael LeMay, David M. Durham, Stefan Mangard
  Euro S&P, 2024

  PDF DOI Source

• Voodoo: Memory Tagging, Authenticated Encryption, and Error Correction through MAGIC

  Lukas Lamster, Martin Unterguggenberger, David Schrammel, Stefan Mangard
  USENIX Security Symposium, 2024

  PDF Slides

• Multi-Tag: A Hardware-Software Co-Design for Memory Safety based on Multi-Granular Memory Tagging

  Martin Unterguggenberger, David Schrammel, Pascal Nasahl, Robert Schilling, Lukas Lamster, Stefan Mangard
  AsiaCCS, 2023

  PDF DOI

• SPEAR-V: Secure and Practical Enclave Architecture for RISC-V

  David Schrammel, Moritz Waser, Lukas Lamster, Martin Unterguggenberger, Stefan Mangard
  AsiaCCS, 2023

  PDF DOI Source

• Cryptographically Enforced Memory Safety

  Martin Unterguggenberger, David Schrammel, Lukas Lamster, Pascal Nasahl, Stefan Mangard
  CCS, 2023

  PDF DOI

• SCFI: State Machine Control-Flow Hardening Against Fault Attacks

  Pascal Nasahl, Martin Unterguggenberger, Rishub Nagpal, Robert Schilling, David Schrammel, Stefan Mangard
  DATE, 2023

  PDF DOI

• EC-CFI: Control-Flow Integrity via Code Encryption Counteracting Fault Attacks

  Pascal Nasahl, Salmin Sultana, Hans Liljestrand, Karanvir Grewal, Michael LeMay, David M. Durham, David Schrammel, Stefan Mangard
  HOST, 2023

  PDF DOI

• MEMES: Memory Encryption-Based Memory Safety on Commodity Hardware

  David Schrammel, Salmin Sultana, Karanvir Grewal, Michael LeMay, David M. Durham, Martin Unterguggenberger, Pascal Nasahl, Stefan Mangard
  SECRYPT, 2023

  PDF DOI

• HashTag: Hash-based Integrity Protection for Tagged Architectures

  Lukas Lamster, Martin Unterguggenberger, David Schrammel, Stefan Mangard
  USENIX Security Symposium, 2023

  PDF Slides

• Jenny: Securing Syscalls for PKU-based Memory Isolation Systems

  David Schrammel, Samuel Weiser, Richard Sadek, Stefan Mangard
  USENIX Security Symposium, 2022

  PDF Slides Source

• SERVAS! Secure Enclaves via RISC-V Authenticryption Shield

  Stefan Steinegger, David Schrammel, Samuel Weiser, Pascal Nasahl, Stefan Mangard
  ESORICS, 2021

  PDF DOI Source

• Big Numbers - Big Troubles: Systematically Analyzing Nonce Leakage in (EC)DSA Implementations

  Samuel Weiser, David Schrammel, Lukas Bodner, Raphael Spreitzer
  USENIX Security Symposium, 2020

  PDF Slides Source

• Donky: Domain Keys - Efficient In-Process Isolation for RISC-V and x86

  David Schrammel, Samuel Weiser, Stefan Steinegger, Martin Schwarzl, Michael Schwarz, Stefan Mangard, Daniel Gruss
  USENIX Security Symposium, 2020

  PDF Slides Source