Adjusting laser injections for fully controlled faults

Abstract : Hardware characterizations of integrated circuits have been evolving rapidly with the advent of more precise, sophisticated and cost efficient tools. In this paper we describe how the fine tuning of a laser source has been used to characterize, set and reset the state of registers in a 90nm chip. By adjusting the incident laser beam's location, it is possible to choose to switch any register value from '0' to '1' or vice-versa by targeting the PMOS side or the NMOS side. Plus, we show how to clear a register by selecting a laser beam's power. With the help of imaging techniques, we are able to explain the underlying phenomenon and provide a direct link between the laser mapping and the physical gate structure. Thus, we correlate the localization of laser fault injections with implementations of the PMOS and NMOS areas in the silicon substrate. This illustrates to what extent laser beams can be used to monitor the bits stored within registers, with adverse consequences in terms of security evaluation of integrated circuits.
Type de document :
Communication dans un congrès
Constructive Side-Channel Analysis and Secure Design 2014, Apr 2014, Paris, France. 〈10.1007/978-3-319-10175-0_16〉
Liste complète des métadonnées

https://hal-emse.ccsd.cnrs.fr/emse-01119590
Contributeur : Franck Courbon <>
Soumis le : lundi 23 février 2015 - 15:18:58
Dernière modification le : mardi 23 octobre 2018 - 14:36:11

Identifiants

Collections

Citation

Franck Courbon, Philippe Loubet-Moundi, Jacques Jean-Alain Fournier, Assia Tria. Adjusting laser injections for fully controlled faults. Constructive Side-Channel Analysis and Secure Design 2014, Apr 2014, Paris, France. 〈10.1007/978-3-319-10175-0_16〉. 〈emse-01119590〉

Partager

Métriques

Consultations de la notice

122