Contact us
Security in Integrated Circuit
Fault Injection

Laser & EM Fault injection

Fault injection may severely harm a system. It relies on physical methods to create valuable logical faults.
Contact an expert
Chip image - Fault Injection and EMFI
Fault injection hardware, LMS Bench

Qualifying your hardware against fault injection

Laser beams, Electromagnetic pulses or Electric glitches are typical ways to generate faults. Qualifying your hardware against such a threat requires a setup in line with the latest developments to anticipate new threats and mitigate risks.

To assess the resistance of your hardware against fault attacks, you need to:

  • Carry out state-of-the-art fault injection campaigns and explore many parameters
  • Consolidate knowledge by gathering, visualising, filtering and exploiting data
Fault Injection, DLMS Bench

Laser Fault injection bench

eShard is working in a close partnership with ALPhANOV. The solution combines ALPhANOV’s excellence in laser and optic systems, together with eShard’s scientific platform. The resulting solution allows the implementation of laser fault injections at the state-of-the-art.

  • Simple or double fault injection laser. The smallest and most powerful spot of the industry
  • Different laser sources, with a focus on near infrared for back-side
  • Back-side imaging with a unique system allowing chip and laser observation while pulsing
  • Get further with extra features, such as spot size parameter, tip tilt table, etc.

EM Fault injection bench

At eShard, we have developed our own technology to inject near field electromagnetic pulses. We designed probes to inject faults in modern devices, such as SoC (System on Chip) with recent technologies.

  • Sets of injection probes with varying size, inductance and transmittance characteristics
  • Adapted to a commercial pulser
  • Quality of the pulse achieves a high level of quality
Fault injection-Software Solution esDynamic

eShard software solution

You are the experts and we empower you. eShard’s fault injection solution is designed to make sure you stay in control. Reconciling the know and the how into a unique know-how content.

  • esDynamic integrates all the fault injection experimental flow: from the instrumentation to the faulty behavior exploitation
  • Manage IC characterization with extensive scans
  • Create heatmaps
  • Exploit faults with DFA (Differential Fault analysis) on various algorithms
Learn more about esDynamic

Training tools

Ecosystems move fast, so do the cybersecurity challenges. Your team must remain up-to-date and master the last security threats because your business and your customers are at stake.
Differential Fault Analysis on symmetric algorithms
Coach: Guillaume Vinet
With this module, you will learn about the main Differential Fault Attacks on AES. You will get familiar with the Piret & Quisquater DFA targetting the AES final rounds and the Kim & Quisquater DFA targeting the AES key schedule. During this training, you will learn how to compute differentials, characterize faults and recover a secret key from faulty AES outputs.
See more details
Laser Fault Injection with esDynamic
Coach: Guillaume Vinet
Using the [esDynamic]( platform, you will learn how to control ALPhANOV's laser equipment and implement a fault campaign. You will learn how to perform a multi-dimensional scanning, and log results of your campaing. You will learn how to use the delay generator and setup your injection trigger to precisely inject a fault during the device execution. During the practice session, you will get the opportunity to inject a successful laser fault on a device.
Side Channel Marvels Tools & Double Fault Injection Attack
Coach: Guillaume Vinet
This practical course introduces the Side Channel Marvels framework. You will learn how to use its different modules to visualise a binary execution, to perform a CDA or DFA, and finally to recover the master key. This module is also composed of a White-Box challenge that shall be defeated with a double fault attack.
Fault Injection starter kit

Starter Kits

Fault injection may turn out to be a powerful means to compromise a device. The ability to secure a system against fault injection depends on the ability to apprehend the technique. It requires practical expertise. Starter kits have been designed to provide the knowledge of practical attacks on recent use cases. They show the complexity of identifying a weakness. Starter kits provide a set of hardware and knowledge to create an in-house reference for practical attacks. For your internal knowledge and training purposes.

  • Hardware kits on modern SoC (System on Chip)
  • Each step of the practical fault injection is described in detail
  • From the bench setup to the final exploitation exhibiting the secret

Expertise is something that you need to farm

Getting up to speed in fault injection requires knowledge of the technique and practical experience. Together with ALPhANOV, a dedicated training was designed to cover all aspects of professional laser fault injections. Delivered on site in ALPhANOV’s training centre, this training will cover both the theoretical and practical aspects of a successful fault injection on a real device.

  • Understanding the laser system and the related safety
  • Setting up a laser fault injection campaign to characterize a device
  • Creating a heatmap and exploiting the results
Fault Injection and EMFI Lab

Our specialized lab

Our lab hosts all the state-of-the-art equipment to implement different physical techniques to perform fault injections: laser, near field electromagnetic or glitch. The laser and optical benches are provided by ALPhANOV as part of our close partnership in their secure premises. Regardless of the fault injection technologies, our expertise team can handle any kind of device. As a result of our expertise, it will be possible to get the evaluation material that you will be able to run in your own lab.

Recent projects included:

  • Glitch attacks study on a commercial smart card
  • Laser fault injection study on a secure controller implementing a signature protocol
  • Biphoton laser study on SoC and SRAM devices


Contact us

Blog Articles

Integrated Circuit Security

Scared: open source side-channel library by eShard

8 min read
Edit by Timon Benjamin Sep 26, 2019
© eShard 2021. All rights reserved
Privacy policy | Legal Notice
Bâtiment GIENAH
11 avenue de Canteranne
33600 Pessac
eShard Nudge
7 rue Gaston de Flotte
13012 Marseille
eShard GmbH
Beethovenallee 21
53173 Bonn
Paya Lebar Quarter
#04-01 Paya Lebar Link