You can simulate the 4004 like the 6502 (see https://t.me/c/1123530133/73), but it seems you need to run on an older Java version.

https://www.4004.com/assets/4004-chipsim-demo-2006-11-13.zip

Take a look at the simulation running:

https://www.youtube.com/watch?v=0Fixr39X8S4&ab_channel=onilink

Topics: IC, Hardware, Reversing. #ic #reversing #hardware #tool

Degate is a multi-platform software for semi-automatic VLSI reverse engineering of digital logic in chips.

https://github.com/DegateCommunity/Degate

Topics: IC Reverse Engineering. #ic #hardware #reversing

Pages: 19

If you want to understand the basic process of IC reversing, you must read this document. It explains some approaches and forms of IC reversing, from product teardowns (simple disassembly process and analysis) and system analysis (probing technique for functional analysis, for example) to an entire analysis of a microchip, using several processes to extract the circuits and make the schematics.

In the case study you can see the explanation of how they got the keys to break the encryption. Despite EEPROMs have protection mechanisms to avoid this, you can break it, i will send here soon.

Topics: IC Reverse Engineering. #ic #hardware #reversing

This post is focused on security in microcontrollers and the common techniques used to read protected data.

https://www.cl.cam.ac.uk/~sps32/mcu_lock.html

In this example, he applied UV light in the protection fuses to enable reading of the program memory. This can be mitigated by using a logic sequence that erases the data present in the data and program memory after changing the state of the fuse:

https://patentimages.storage.googleapis.com/ca/49/c0/379668abd488f4/US5469557.pdf

Don't forget to check his works, there are a lot of information in the main page:

https://www.cl.cam.ac.uk/~sps32/

#programming #c

Topics : IC Reverse Engineering. #ic #hardware #reversing

In this paper you can see how microprobing can be used to break encryption in microcontrollers, it was used two samples to show that, power analysis and some statistical analysis were used along with microprobing to extract the encrypted data and create a table of corresponding values from it, injecting arbitrary data on data bus.

You can find more information about the aspects of the memories in the book "Hardware Security - A Hands-on Learning Approach"

Topics: Cryptography, Hardware. #hardware #crypto

Differential Power Analysis (DPA) attacks use statistical analysis and error correction techniques to extract information correlated to secret keys. DPA can use known plaintext or known ciphertext and can find encryption or decryption keys. Several sources introduce noise into DPA measurements, including electromagnetic radiation and thermal noise, mismatching of device clocks and sample clocks, and uncorrected temporal misalignment of traces.

Useful for understanding of DES algorithm. #crypto

Topics: Intel ME. #reversing

Kakaroto's research of Intel ME Exploitation.

Intel TXE-Poc:

https://github.com/ptresearch/IntelTXE-PoC

sources:

https://kakaroto.ca/2019/11/exploiting-intels-management-engine-part-1-understanding-pts-txe-poc/

https://kakaroto.homelinux.net/2019/11/exploiting-intels-management-engine-part-2-enabling-red-jtag-unlock-on-intel-me-11-x-intel-sa-00086/

https://kakaroto.ca/2020/08/exploiting-intels-management-engine-part-3-usb-hijacking-intel-sa-00086/

Topics: MIT Courses. #programming #comp_arch #learning

MIT courses of Electrical Engineering and Computer Science.

https://ocw.mit.edu/courses/electrical-engineering-and-computer-science/

#math #learning

https://ocw.mit.edu/courses/mathematics/

check https://t.me/c/1123530133/22

Topics: MOLES, Side-Channel Attack, Differential Power Analysis. #hardware #crypto

Malicious Off-Chip Leakage Enabled by Side-Channels (MOLES) is implemented with spread-spectrum techniques to create additional side-channels that can leak information below the noise power level, thus hardening the process of trojan detection, since only the attacker knows how to extract the information leaked by the side-channels.

Additional information about spread-spectrum:

https://www.ni.com/pt-br/innovations/white-papers/06/understanding-spread-spectrum-for-communications.html

https://www.electronics-notes.com/articles/radio/dsss/what-is-direct-sequence-spread-spectrum.php (using the XOR)