Defeating a Secure Element with Multiple Laser Fault Injections

In 2020, we evaluated the Microchip ATECC508A Secure Memory circuit. We identified a vulnerability allowing an attacker to read a secret data slot using Single Laser Fault Injection. This was presented during Black Hat USA. Subsequently, the product life cycle of this chip turned to be deprecated, and the circuit has been superseded by the ATECC608A, supposedly more secure. We present a new attack allowing retrieval of the same data slot secret for this new chip, using this time a double Laser Fault Injection to bypass two security tests during a single command execution. The method is different from our previous paper and the attack path more complex...
By: Olivier Heriveaux
Full Abstract & Presentation Materials:
www.blackhat.c...