The Sorcerer’s Apprenctice’s Guide to Fault Attacks Hagai Bar-El, Hamid Choukri, David Naccache, Michael Tunstall, Claire Whelan WHAT IS THIS ABOUT? OIIK’d,’l lpl islkeeean stdeo $ sb1eu5ny d Broken toys are not charged to our clients by p3bo ysp tlDaanlH eoLsrder Jack THhoawt wwoilul lydo bu ep a$y1?5 car = $3 Dino plane = $5 Dino buys toys from Jack The postman wants to know what Dino bought for $15 what did he buy Dino for $15? malicious postman In the meanwhile Jack prepares the DHL and gives it to the postman Who kicks it strong enough to break one toy and gives it to Dino a week later he monitors Dino’s postal order... = 4 × 3 = $12 = 2 × 5 = $10 Lesson learned: Fault attacks can also extract secrets from tokens! Hardware faults can have various sources: voltage glitches, light beams, laser beams... How is this done experimentally? An Experimental Chip Synchronous µP Clocked processor Secure µP Asynchronous processor Dual Rail Implementation Memory Encryption Unit