Electromagnetic Transient Faults Injection on a Hardware and a Software Implementations of AES

Electromagnetic Glitch on the AES Round Counter

“…A study about the emg localized effect is presented in [9]. As reported by the authors, the propagation delays are increased through the circuit's logic when the emg is injected on top of the die surface.…”

“…According to previous experiments in [9] on a basic 8-bit avr microcontroller, an emg induces faults during the program execution. A careful analysis of the faulty behavior, revealed that they were due to an instruction skip at the instant of the emg injection.…”

“…Their ability to propagate through different materials is the most interesting one since it allows an attacker (without any preliminary preparation of the chip) to induce a very short glitch in the power supply voltage. This short glitch in the power supply voltage is the result of a coupling mechanism between the coil antenna and the targeted chip's Power Ground Network (pgn) [14,9].…”

“…Afterwards, other research, e.g. [17] and [9], reported further successful em fault attacks on cryptosystems.…”

Uniquely Identifiable Tamper-Evident Device Using Coupling between Subwavelength Gratings

“…An outstanding semi-invasive attack is fault injection, in which atypical environmental conditions are instigated during cryptographic operation in order to uncover the internal states, and which can breach a circuit faster than noninvasive attacks [48,[56][57][58]. Fault injection employs power tampering, short clock signals, large temperature variations, external electromagnetic fields, and light attacks such as pulsed lasers or ultraviolet lamps [59][60][61][62][63][64] to alter the state of chosen transistors in the IC, allowing a pirate to figure out the operation of the IC and ways to bypass its security features.…”