#programming #c

Topics : IC Reverse Engineering. #ic #hardware #reversing

In this paper you can see how microprobing can be used to break encryption in microcontrollers, it was used two samples to show that, power analysis and some statistical analysis were used along with microprobing to extract the encrypted data and create a table of corresponding values from it, injecting arbitrary data on data bus.

You can find more information about the aspects of the memories in the book "Hardware Security - A Hands-on Learning Approach"

Topics: Cryptography, Hardware. #hardware #crypto

Differential Power Analysis (DPA) attacks use statistical analysis and error correction techniques to extract information correlated to secret keys. DPA can use known plaintext or known ciphertext and can find encryption or decryption keys. Several sources introduce noise into DPA measurements, including electromagnetic radiation and thermal noise, mismatching of device clocks and sample clocks, and uncorrected temporal misalignment of traces.

Useful for understanding of DES algorithm. #crypto

Topics: Intel ME. #reversing

Kakaroto's research of Intel ME Exploitation.

Intel TXE-Poc:

https://github.com/ptresearch/IntelTXE-PoC

sources:

https://kakaroto.ca/2019/11/exploiting-intels-management-engine-part-1-understanding-pts-txe-poc/

https://kakaroto.homelinux.net/2019/11/exploiting-intels-management-engine-part-2-enabling-red-jtag-unlock-on-intel-me-11-x-intel-sa-00086/

https://kakaroto.ca/2020/08/exploiting-intels-management-engine-part-3-usb-hijacking-intel-sa-00086/

Topics: MIT Courses. #programming #comp_arch #learning

MIT courses of Electrical Engineering and Computer Science.

https://ocw.mit.edu/courses/electrical-engineering-and-computer-science/

#math #learning

https://ocw.mit.edu/courses/mathematics/

check https://t.me/c/1123530133/22

Topics: MOLES, Side-Channel Attack, Differential Power Analysis. #hardware #crypto

Malicious Off-Chip Leakage Enabled by Side-Channels (MOLES) is implemented with spread-spectrum techniques to create additional side-channels that can leak information below the noise power level, thus hardening the process of trojan detection, since only the attacker knows how to extract the information leaked by the side-channels.

Additional information about spread-spectrum:

https://www.ni.com/pt-br/innovations/white-papers/06/understanding-spread-spectrum-for-communications.html

https://www.electronics-notes.com/articles/radio/dsss/what-is-direct-sequence-spread-spectrum.php (using the XOR)

#learning #misc

https://sci.hubg.org/

@scihubot

The first pirate website in the world to provide mass and public access to tens of millions of research papers.

Topics: Machine Learning. #roadmap

Machine Learning Roadmap.

Topics: Scan Chain, Scan Based Attacks, JTAG. #hardware #reversing

This paper explains how Scan-based Design-for-Test (DFT) can be used to compromise the security of a microchip and extract the secret keys of a cryptographic algorithm.

Advanced Programming in the UNIX Environment - Complete Course

In this course (CS631) from Stevens Institute of Technology taught by Jan Schaumann, you will learn to develop complex system-level software in the C programming language while gaining an intimate understanding of the Unix operating system and its programming environment.

—Topics covered include the user/kernel interface, fundamental concepts of Unix, user authentication, basic and advanced I/O, fileystems, signals, process relationships, and interprocess communication. Fundamental concepts of software development and maintenance on Unix systems (development and debugging tools such as "make" and "gdb") will also be covered.

—Full course schedule, slides and programs can be found at:
https://stevens.netmeister.org/631/

—Full video series (56) is available on youtube too:
https://www.youtube.com/watch?v=BsB9Cg6yJc4&list=PL0qfF8MrJ-jxMfirAdxDs9zIiBg2Wug0z&index=1

#bsd #c #learning

Topics: Electromagnetic Side-Channel Attack, EM Simulation. #hardware #reversing

Security Evaluation against EM side-channel attack using an EM simulation methodology.

This EM simulation methodology involves current flow simulation, chip layout parasitics extraction, then data processing to simulate direct EM emissions or modulated emissions.

Topics: PCI-based DMA Attack. #hardware #exploit

https://github.com/carmaa/inception

Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe HW interfaces.