‹ BackHN Continuity

Thread

Photon-Emission-Guided Laser Fault Injection Enables RP2350 Secure Debug

220 points · 92 comments · synack

  1. stackghost · · focus · HN ↗
    > The attack requires physical access, destructive preparation, and approximately $250,000 of laboratory equipment.

    Not super practical, but neat attack

    1. stickfigure · · focus · HN ↗
      That is peanuts for a nation-state actor.
      1. stackghost · · focus · HN ↗
        Sure, but if you’re defending against a nation state actor hopefully you aren’t expecting a raspberry pi to keep you secure.
        1. ssl-3 · · focus · HN ↗
          The RP2350 is an inexpensive microcontroller IC with reasonable performance and some very useful (and somewhat unusual) features in its PIO blocks.

          Why wouldn't a person build that into the heart of something important?

          1. sephamorr · · focus · HN ↗
            "Important" and "tamper proof against a determined adversary" are very different goals.
            1. jacquesm · · focus · HN ↗
              Tamper proof against a determined adversary starts at 'call us' not at '$10'.
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.