Pascal Nasahl

Pascal Nasahl

Senior Hardware/Software Engineer

lowRISC

Biography

Currently, I am a security engineer at lowRISC. Before that, I obtained my hardware security PhD in the Secure Systems (SESYS) group at IAIK, Graz University of Technology. My research interests include designing secure systems, with a focus on secure processor designs. Here, I am interested in developing countermeasures for software and physical attacks, such as fault attacks. During my academic career, I conducted research internships at Google, Intel Labs, and Riscure.

Interests

  • System Security
  • Fault Attacks
  • Hardware Design

Education

  • PhD in Computer Science, 2023

    Graz University of Technology

  • MSc in Information and Computer Engineering, 2019

    Graz University of Technology

  • BSc in Information and Computer Engineering, 2016

    Graz University of Technology

Publications

Cryptographically Enforced Memory Safety
Multi-Tag: A Hardware-Software Co-Design for Memory Safety based on Multi-Granular Memory Tagging
MEMES: Memory Encryption-based Memory Safety on Commodity Hardware
SCRAMBLE-CFI: Mitigating Fault-Induced Control-Flow Attacks on OpenTitan
EC-CFI: Control-Flow Integrity via Code Encryption Counteracting Fault Attacks
SCFI: State Machine Control-Flow Hardening Against Fault Attacks
SFP: Providing System Call Flow Protection against Software and Fault Attacks
SYNFI: Pre-Silicon Fault Analysis of an Open-Source Secure Element
FIPAC: Thwarting Fault-and Software-Induced Control-Flow Attacks with ARM Pointer Authentication
SecWalk: Protecting Page Table Walks Against Fault Attacks
Protecting Indirect Branches against Fault Attacks using ARM Pointer Authentication
SERVAS! Secure Enclaves via RISC-V Authenticryption Shield
CrypTag: Thwarting Physical and Logical Memory Vulnerabilities using Cryptographically Colored Memory
HECTOR-V: A Heterogeneous CPU Architecture for a Secure RISC-V Execution Environment
Attacking AUTOSAR using Software and Hardware Attacks
Pointing in the Right Direction - Securing Memory Accesses in a Faulty World