Explore power analysis attacks on embedded systems in this comprehensive conference talk from Blackhat EU 2013. Dive into the fundamentals of side-channel analysis, focusing on power consumption as a vulnerability. Learn about different power analysis techniques, including Differential Power Analysis (DPA) and Correlation Power Analysis (CPA). Examine the importance of sample rates, synchronization, and trigger jitter in successful attacks. Discover practical tips for using oscilloscopes and specialized hardware like OpenADC for data acquisition. Follow step-by-step instructions on attacking smart cards and other embedded devices, including DIY examples using pre-amplifiers and various development boards. Gain insights into characterizing power consumption, acquiring traces, and breaking encryption on platforms such as AVR microcontrollers. Access additional resources, including slides and the ChipWhisperer project, to further enhance your understanding of power analysis techniques for embedded system security.
Overview
Syllabus
Intro
The Way Forward
Motivation
Side Channel?
Data Bus Line
Power Channel.
Power Model?
Simple 4-Bit Example
Original DPA
Differential Power Analysis
Correlation Analysis
Simple Example Failings
Correlation Power Analysis
Current Software Tools
Does Sample Rate Matter? Comparison of PGE for Synchronous and ASynchronous Sampling
Using 4x Source Clock
Synchronization
Explaining Trigger Jitter'
Tips for using a Normal Oscilloscope
OpenADC Comparison
Synchronous Sampling Scope
Attacks against Smart Card
SmartCard Capture - Cheap
Notes on Step 1
Continued (Testing)
Characterize
Step 3: Shunt
Step 3: Characterization Cont'd
Acquire
Break It
DIY: Example
Pre-amplifier: Buying One
SASEBO-W Board
Xmega Board
Arduino
Xmega Capture Hardware
Example Results - AVR
Taught by
Colin O'Flynn
