Fault injection
Qualifying your hardware against fault injection
Laser beams, Electromagnetic pulses or Electric glitches are typical ways to generate faults. Qualifying your hardware against such a threat requires a setup in line with the latest developments to anticipate new threats and mitigate risks.
To assess the resistance of your hardware against fault attacks, you need to:
- Carry out state-of-the-art fault injection campaigns and explore many parameters
- Consolidate knowledge by gathering, visualising, filtering and exploiting data
Laser Fault injection bench
eShard is working in a close partnership with ALPhANOV. The solution combines ALPhANOV’s excellence in laser and optic systems, together with eShard’s scientific platform. The resulting solution allows the implementation of laser fault injections at the state-of-the-art.
- Simple or double fault injection laser. The smallest and most powerful spot of the industry
- Different laser sources, with a focus on near infrared for back-side
- Back-side imaging with a unique system allowing chip and laser observation while pulsing
- Get further with extra features, such as spot size parameter, tip tilt table, etc.
EM Fault injection bench
At eShard, we have developed our own technology to inject near field electromagnetic pulses. We designed probes to inject faults in modern devices, such as SoC (System on Chip) with recent technologies.
- Sets of injection probes with varying size, inductance and transmittance characteristics
- Adapted to a commercial pulser
- Quality of the pulse achieves a high level of quality
eShard software solution
You are the experts and we empower you. eShard’s fault injection solution is designed to make sure you stay in control. Reconciling the know and the how into a unique know-how content.
- esDynamic integrates all the fault injection experimental flow: from the instrumentation to the faulty behavior exploitation
- Manage IC characterization with extensive scans
- Create heatmaps
- Exploit faults with DFA (Differential Fault analysis) on various algorithms
Coaching that may be interesting
Starter Kits
Fault injection may turn out to be a powerful means to compromise a device. The ability to secure a system against fault injection depends on the ability to apprehend the technique. It requires practical expertise. Starter kits have been designed to provide the knowledge of practical attacks on recent use cases. They show the complexity of identifying a weakness. Starter kits provide a set of hardware and knowledge to create an in-house reference for practical attacks. For your internal knowledge and training purposes.
- Hardware kits on modern SoC (System on Chip)
- Each step of the practical fault injection is described in detail
- From the bench setup to the final exploitation exhibiting the secret
Expertise is something that you need to farm
Getting up to speed in fault injection requires knowledge of the technique and practical experience. Together with ALPhANOV, a dedicated training was designed to cover all aspects of professional laser fault injections. Delivered on site in ALPhANOV’s training centre, this training will cover both the theoretical and practical aspects of a successful fault injection on a real device.
- Understanding the laser system and the related safety
- Setting up a laser fault injection campaign to characterize a device
- Creating a heatmap and exploiting the results
Our specialized lab
Our lab hosts all the state-of-the-art equipment to implement different physical techniques to perform fault injections: laser, near field electromagnetic or glitch. The laser and optical benches are provided by ALPhANOV as part of our close partnership in their secure premises. Regardless of the fault injection technologies, our expertise team can handle any kind of device. As a result of our expertise, it will be possible to get the evaluation material that you will be able to run in your own lab.
Recent projects included:
- Glitch attacks study on a commercial smart card
- Laser fault injection study on a secure controller implementing a signature protocol
- Biphoton laser study on SoC and SRAM devices
