Switching Off your Device Does Not Protect Against Fault Attacks - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue IACR Transactions on Cryptographic Hardware and Embedded Systems Année : 2024

Switching Off your Device Does Not Protect Against Fault Attacks

Pierre-Antoine Tissot
Lilian Bossuet
Jean-Max Dutertre
Brice Colombier
Vincent Grosso

Résumé

Physical attacks, and among them fault injection attacks, are a significant threat to the security of embedded systems. Among the means of fault injection, laser has the significant advantage of being extremely spatially accurate. Numerous state-of-the-art studies have investigated the use of lasers to inject faults into a target at run-time. However, the high precision of laser fault injection comes with requirements on the knowledge of the implementation and exact execution time of the victim code. The main contribution of this work is the demonstration on experimental basis that it is also possible to perform laser fault injection on an unpowered device. Specifically, we targeted the Flash non-volatile memory of a 32-bit microcontroller. The advantage of this new attack path is that it does not require any synchronisation between the victim and the attacker. We provide an experimental characterization of this phenomenon with a description of the fault model from the physical level up to the software level. Finally, we applied these results to carry out a persistent fault analysis on a 128-bit AES with a particularly realistic attacker model which reinforces the interest of the PFA.
Fichier principal
Vignette du fichier
article.pdf (3.03 Mo) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Licence

Dates et versions

hal-04642748 , version 1 (10-07-2024)

Licence

Identifiants

  • HAL Id : hal-04642748 , version 1

Citer

Paul Grandamme, Pierre-Antoine Tissot, Lilian Bossuet, Jean-Max Dutertre, Brice Colombier, et al.. Switching Off your Device Does Not Protect Against Fault Attacks. IACR Transactions on Cryptographic Hardware and Embedded Systems, inPress. ⟨hal-04642748⟩
0 Consultations
0 Téléchargements

Partager

Gmail Mastodon Facebook X LinkedIn More