What is a Hardware Fault Injection?

In a close partnership with ALPhANOV, the Laser Fault Injection tool combines ALPhANOV’s excellence in laser and optic systems, together with eShard’s scientific platform.

The resulting solution allows the implementation of Laser Fault Injections at the state-of-the-art.

✅ Simple or double fault injection laser. The smallest and most powerful spot of the industry.

✅ Different laser sources, with a focus on near infrared for back-side.

✅ Back-side imaging with a unique system allowing chip and laser observation while pulsing.

✅ Get further with extra features, such as spot size parameter, tip tilt table, etc.

✅ The software suite to control the equipments and manage chip characterization

✅ The software suite to manage fault injection campaigns, process faulty behaviours and exploit them (eg: DFA)

The set of EM injection probes has been designed by eShard’s experts based on practical experimentations made on System-on-Chip devices. They have been proven efficient on different modern SoCs, including the use cases elaborated in the Starter Kit offering.

The kit includes cables and accessories needed to make a proper electromagnetic fault injection, in particular to compensate the bounce effect. It is delivered with the characteristics of the probes either in a PDF document or in a notebook.

The kit is used in our EM fault injection turnkey solution.

In fault injection experiments (laser, electromagnetic or power glitch-based), it is likely that the device under test (DUT) encounters operational issues leading to crashes or mute mechanisms. eShard ColdReset hardware device brings the possibility for the user to manage the DUT power source (on/off) through USB and/or jack ports with timing control. The fault injection test campaign can be fully automated.

The ColdReset is used in our fault injection turnkey solutions.

Fault injection may turn out to be a powerful means to compromise a device. The ability to secure a system against fault injection depends on the ability to apprehend the technique. It requires practical expertise. Starter kits have been designed to provide the knowledge of practical attacks on recent use cases. They show the complexity of identifying a weakness. Starter kits provide a set of hardware and knowledge to create an in-house reference for practical attacks. For your internal knowledge and training purposes.

• Hardware kits on modern SoC (System on Chip)
• Each step of the practical fault injection is described in detail
• From the bench setup to the final exploitation exhibiting the secret

Our team of experts is available for specialized Fault Injection audits. They have long track records in practical Fault injection experiments with a variety of techniques : Power & Clock Glitch, Electromagnetic Fault Injection, Laser Fault Injection (in partnership with ALPhANOV).

Our experts combined with our high-end laboratory, equipped with high end Fault Injection capabilities lead to best in class Fault Injections evaluations. Our recent works included:

• Black box security evaluation of a Secure Element chip - Glitch and SCA
• Evaluation of the resistance of a SE chip against fault injections - LFI & EMFI
• Detecting and exploiting HW & SW AES implementations on a modern SoC - LFI & EMFI