E Amazings
  • Home
  • Automotive
  • Business
  • CBD
  • Crypto
  • Education
  • Entertainment
  • Fashion
  • Finance
  • Health
  • Home Improvement
  • Law \ Legal
  • News
  • Shopping
  • Sports
  • Technology
  • Travel
  • Need Help?

Subscribe to Updates

Get the latest creative news from FooBar about art, design and business.

What's Hot

Foreign portfolio investors withdraw Rs 17,000 cr from Indian equities in January so far; adopt cautious stance ahead of Budget 2023

January 29, 2023

Weather Update: Mild showers expected in Delhi NCR, UP; cold wave abates Punjab, Haryana

January 29, 2023

NTPC Dividend 2023: State-owned power generation company to pay Rs 4.25 dividend; check record and payment date

January 29, 2023
Facebook Twitter Instagram
E Amazings
  • Home
  • Automotive
  • Business
  • CBD
  • Crypto
  • Education
  • Entertainment
  • Fashion
  • Finance
  • Health
  • Home Improvement
  • Law \ Legal
  • News
  • Shopping
  • Sports
  • Technology
  • Travel
  • Need Help?
Facebook Twitter Instagram
E Amazings
You are at:Home»Technology»Defeating A Cryptoprocessor With Laser Beams
Technology

Defeating A Cryptoprocessor With Laser Beams

By November 26, 2022No Comments2 Mins Read
Facebook Twitter Pinterest LinkedIn Tumblr Email
Share
Facebook Twitter Pinterest WhatsApp Email


Cryptographic coprocessors are nice, for the most part. These are small chips you connect over I2C or One-Wire, with a whole bunch of cryptographic features implemented. They can hash data, securely store an encryption key and do internal encryption/decryption with it, sign data or validate signatures, and generate decent random numbers – all things that you might not want to do in firmware on your MCU, with the range of attacks you’d have to defend it against. Theoretically, this is great, but that moves the attack to the cryptographic coprocessor.

In this BlackHat presentation (slides), [Olivier Heriveaux] talks about how his team was tasked with investigating the security of the Coldcard cryptocurrency wallet. This wallet stores your private keys inside of an ATECC608A chip, in a secure area only unlocked once you enter your PIN. The team had already encountered the ATECC608A’s predecessor, the ATECC508A, in a different scenario, and that one gave up its secrets eventually. This time, could they break into the vault and leave with a bag full of Bitcoins?

Lacking a vault door to drill, they used a powerful laser, delidding the IC and pulsing different areas of it with the beam. How do you know when exactly to pulse? For that, they took power consumption traces of the chip, which, given enough tries and some signal averaging, let them make educated guesses on how the chip’s firmware went through the unlock command processing stages. We won’t spoil the video for you, but if you’re interested in power analysis and laser glitching, it’s well worth 30 minutes of your time.

You might think it’s good that we have these chips to work with – however, they’re not that hobbyist-friendly, as proper documentation is scarce for security-through-obscurity reasons. Another downside is that, inevitably, we’ll encounter them being used to thwart repair and reverse-engineering. However, if you wanted to explore what a cryptographic coprocessor brings you, you can get an ESP32 module with the ATECC608A inside, we’ve seen this chip put into an IoT-enabled wearable ECG project, and even a Nokia-shell LoRa mesh phone!

We thank [Chip] for sharing this with us!



Source link

Related Posts

Creative Vandalism The KITT Way

By January 29, 2023

3D-Printed Servo Motor Has 360 Degrees Of Rotation

By January 29, 2023

An Atomic Pendulum Clock Accurate Enough For CERN

By January 28, 2023

Toroidal Propellers Make Drones Less Annoying

By January 28, 2023
Add A Comment

Comments are closed.

Our Picks

Foreign portfolio investors withdraw Rs 17,000 cr from Indian equities in January so far; adopt cautious stance ahead of Budget 2023

By January 29, 2023

Weather Update: Mild showers expected in Delhi NCR, UP; cold wave abates Punjab, Haryana

By January 29, 2023

NTPC Dividend 2023: State-owned power generation company to pay Rs 4.25 dividend; check record and payment date

By January 29, 2023
Recent Posts
  • Foreign portfolio investors withdraw Rs 17,000 cr from Indian equities in January so far; adopt cautious stance ahead of Budget 2023 January 29, 2023
  • Weather Update: Mild showers expected in Delhi NCR, UP; cold wave abates Punjab, Haryana January 29, 2023
  • NTPC Dividend 2023: State-owned power generation company to pay Rs 4.25 dividend; check record and payment date January 29, 2023
  • Tech Mahindra Q3 Results: net profit revenue margin rupee dollar currency exchange January 29, 2023
  • Question Paper Leak: Gujarat govt cancels junior clerk exam hours before schedule on Sunday January 29, 2023
  • Top 5 Bowlers To Watch Out For In The TATA IPL 2023 Season. Possible Purple Cap Winners.  January 29, 2023
  • Google introduces AI system MusicLM that generates music from text descriptions January 29, 2023
Archives
  • January 2023
  • December 2022
  • November 2022
  • October 2022
  • September 2022
  • August 2022
  • July 2022
  • June 2022
  • September 2021
Facebook Twitter Instagram Pinterest TikTok
© 2022 E Amazings - All Rights Reserved.

Type above and press Enter to search. Press Esc to cancel.