Practical Software Countermeasures 4 Hardware Glitch Attacks
summary
Uses a ChipWhisperer with an STM32F3 target and an Arduino testboard (decoupling caps removed) to run voltage glitch campaigns that hit the password check hundreds to thousands of times in minutes; a plain implementation yields 221 successes in 10 minutes and a negated logic version 7,172. Adding the volatile keyword or simple redundancy like duplication/masking/inversion drops successes to near zero, while careless control-flow changes (break/negation) make the device far easier to breach.
AI-written summary · about
chapters (8)
- 0:00Introduction to talk
- 1:55What are hardware glitch attacks
- 8:30How glitches affect code execution
- 15:51Hardware vs software countermeasures
- 19:24Software countermeasures research
- 26:54Code writing best practices
- 31:55Results and key takeaways
- 34:49Q&A session
related talks
46mChip.Fail - Glitching the Silicon of the Connected World
43mImplementing Practical Electrical Glitching Attacks
44mSilicon Under Attack Physical Exploitation Of Modern Chips
45mKeynote: How to Build Hardware Trojans
48mFatal Fury on ESP32: Time to Release Hardware Exploits
01h 07mPEW PEW PEW: Designing Secure Boot Securely
51mExploiting Hardware Glitches And Side Channels In Perfect Software
21mGlitchGlück: Enabling Software Vulnerabilities through Guided Hardware Fault Injection