SOLUTIONS
> Side Channel Analysis
Ready-to-use side channel tools to assess cryptography algorithms.
> Fault Injection: Laser, EM & Glitching
Make sure your chip withstands different techniques of physical fault injections.
> Firmware Security Analysis
Qualify embedded code binaries without physical devices and benches.
> Security Failure Analysis
Photoemission analysis to explore internal information in a chip.
> Vulnerability Research
Dynamic analyses at a system level for investigating potential vulnerabilities.
> esDynamic for EDU SCA and FI
A learning center for academics to teach and perform side-channel analysis and fault injection
TECHNOLOGIES
> Data Science Platform
esDynamic is a complete data focused platform to leverage the know-how of your team for complex analyses.
> esFirmware Engine
Assess the security of the firmware of IoT devices against logical and physical attacks.
> esReven Engine
Record and replay vulnerability researches within reverse engineering processes and tools.
PROFESSIONAL SERVICES
> Cybersecurity Training
Grow your expertise with training modules driven by a coach.
> Hardware Evaluation Lab
High-end laboratory capabilities specialized in hardware security evaluations.
EXPERTISE
> Mobile App Security
Onboard your Team into your Security Challenges.
> DevSecOps
Integrate the security protections verification in your CI/CD pipeline.
> PCI MPoC
Prepare your product to meet this new mobile payment standard.
SOLUTIONS
> Mobile App Security Testing (MAST)
esChecker SaaS: automating the security testing of your mobile app binary.
PROFESSIONAL SERVICES
> Mobile App Penetration Testing
Testing the resiliency of your Mobile App, SDK or RASP tool.
> Backend Penetration Testing
Testing the resiliency of your Web App, API or Backend Systems.
> Coaching for Mobile App Developers
Providing insights into the mobile app threats and how attackers work by a learning-by-doing approach.
Go to our German website
OUR COMPANY
> Events
CAREERS
> Meet our experts
> Open positions
Join our team!
FOLLOW US
Twitter
Linkedin
Youtube
Github
Gitlab
What is a Hardware Fault Injection?
How to qualify a product against hardware fault injection?
Qualifying a hardware product against fault injection requires a laboratory setup in line with the latest developments to anticipate new threats and mitigate risks.
To assess the resistance of your hardware against fault attacks, you need to:
- Carry out state-of-the-art fault injection campaigns and explore many parameters
- Consolidate knowledge by gathering, visualising, filtering and exploiting data
What is Laser Fault Injection by eShard ?
In a close partnership with ALPhANOV, the Laser Fault Injection tool combines ALPhANOV’s excellence in laser and optic systems, together with eShard’s scientific platform.
The resulting solution allows the implementation of Laser Fault Injections at the state-of-the-art.
✅ Simple or double fault injection laser. The smallest and most powerful spot of the industry.
✅ Different laser sources, with a focus on near infrared for back-side.
✅ Back-side imaging with a unique system allowing chip and laser observation while pulsing.
✅ Get further with extra features, such as spot size parameter, tip tilt table, etc.
What is Power & Clock Glitching Fault Injection by eShard?
At eShard, we propose a ready to use glitching hardware setup that has been designed to fault complex designs such as FPGAs. The hardware bench includes:
- A high end oscilloscope that is sufficient for fault injection
- A waveform generator selected for successful glitching The hardware comes integrated with eShard’s Fault Injection Software Platform.
What is EMFI Electromagnetic Fault Injection tools by eShard?
At eShard, we have developed our own technology to inject near field electromagnetic pulses. We designed dedicated EMFI probes to inject faults in modern devices, such as SoC (System on Chip) with recent technologies.
- Sets of injection probes with varying size, inductance and transmittance characteristics
- Adapted to a commercial pulser
- Quality of the pulse achieves a high level of quality
esDynamic for hardware fault injections
You are the experts and esDynamic scientific platform empowers expert for their fault injection experimentations. It is a ready to use solution designed to make sure you stay in control. Reconciling the know and the how into a unique know-how content.
- esDynamic integrates all the fault injection experimental flow: from the instrumentation to the faulty behavior exploitation
- Manage Integrated Circuits characterization with extensive scans
- Create heatmaps
- Exploit faults with DFA (Differential Fault analysis) on various algorithms
Our clients
"Purchase and installation went really great. Support responds very fast and is helpful in all questions. Offers also remote sessions for troubleshooting and for practice. Before the purchase we were offered a 30 day trial version (free of charge)."
Training program
Starter Kits
Fault injection may turn out to be a powerful means to compromise a device. The ability to secure a system against fault injection depends on the ability to apprehend the technique. It requires practical expertise. Starter kits have been designed to provide the knowledge of practical attacks on recent use cases. They show the complexity of identifying a weakness. Starter kits provide a set of hardware and knowledge to create an in-house reference for practical attacks. For your internal knowledge and training purposes.
- Hardware kits on modern SoC (System on Chip)
- Each step of the practical fault injection is described in detail
- From the bench setup to the final exploitation exhibiting the secret
Grow your Expertise
Getting up to speed in fault injection requires knowledge of the technique and practical experience. Together with ALPhANOV, a dedicated training was designed to cover all aspects of professional laser fault injections. Delivered on site in ALPhANOV’s training centre, this training will cover both the theoretical and practical aspects of a successful fault injection on a real device.
- Understanding the laser system and the related safety
- Setting up a laser fault injection campaign to characterize a device
- Creating a heatmap and exploiting the results
Our specialized lab
Our team of experts is available for specialized Fault Injection audits. They have long track records in practical Fault injection experiments with a variety of techniques : Power & Clock Glitch, Electromagnetic Fault Injection, Laser Fault Injection (in partnership with ALPhANOV).
Our experts combined with our high-end laboratory, equipped with high end Fault Injection capabilities lead to best in class Fault Injections evaluations. Our recent works included:
- Black box security evaluation of a Secure Element chip - Glitch and SCA
- Evaluation of the resistance of a SE chip against fault injections - LFI & EMFI
- Detecting and exploiting HW & SW AES implementations on a modern SoC - LFI & EMFI