Abstract:Embedded systems are ubiquitous. However, physical access of users and likewise attackers makes them often threatened by fault attacks: a single fault during the computation of a cryptographic primitive can lead to a total loss of system security. This can have serious consequences, e.g., in safetycritical systems, including bodily harm and catastrophic technical failures. However, countermeasures often focus on isolated fault models and high layers of abstraction. This leads to a dangerous sense of security, because exploitable faults that are only visible at machine code level might not be covered by countermeasures. In this work we present ARMORY, a fully automated open source framework for exhaustive fault simulation on binaries of the ubiquitous ARM-M class. It allows engineers and analysts to efficiently scan a binary for potential weaknesses against arbitrary combinations of multi-variate fault injections under a large variety of fault models. Using ARMORY, we demonstrate the power of fully automated fault analysis and the dangerous implications of applying countermeasures without knowledge of physical addresses and offsets. We exemplarily analyze two case studies, which are highly relevant for practice: a DFA on AES (cryptographic) and a secure bootloader (non-cryptographic). Our results show that indeed numerous exploitable faults found by ARMORY which occur in the actual implementations are easily missed in manual inspection. Crucially, most faults are only visible when taking machine code information, i.e., addresses and offsets, into account. Surprisingly, we show that a countermeasure that protects against one type of fault can actually largely increase the vulnerability to other fault models. Our work demonstrates the need for countermeasures that, at least in their evaluation, are not restricted to isolated fault models and consider low-level information [...].

Usefulness and effectiveness of HW and SW protection mechanisms in a processor-based system

A Secure Scan Method for Crypto Chips

Experimental evaluation of two software countermeasures against fault attacks

Electromagnetic fault injection against a System-on-Chip, toward new micro-architectural fault models

Persistence Wears down Resistance: Persistent Fault Analysis on Unprotected and Protected Block Cipher Implementations (Extended Abstract)

When a Patch is Not Enough - HardFails: Software-Exploitable Hardware Bugs

Characterizing the Effects of Intermittent Faults on a Processor for Dependability Enhancement Strategy

Self-Assertion-Based Countermeasures Within a RISC-V Microprocessor for Coverage of Information Leakage Faults

Hardware Trojans in Chips: A Survey for Detection and Prevention

A Hierarchical Fault Injection System for RISC-V Processors Targeting Single Event Upsets in Flip-Flops

Hardware-Assisted Monitoring For Instruction Security In Embedded System

Towards Single-Event Upset detection in Hardware Secure RISC-V processors

Security and Reliability Evaluation of Countermeasures implemented using High-Level Synthesis

DHRCA: A Design of Security Architecture Based on Dynamic Heterogeneous Redundant for System on Wafer

Don't CWEAT It: Toward CWE Analysis Techniques in Early Stages of Hardware Design

An Accurate Cross-Layer Approach for Online Architectural Vulnerability Estimation

ARMORY: Fully Automated and Exhaustive Fault Simulation on ARM-M Binaries

Node Monitoring as a Fault Detection Countermeasure against Information Leakage within a RISC-V Microprocessor

SoC It to EM: ElectroMagnetic Side-Channel Attacks on a Complex System-on-Chip

Preventing Your Faults From Telling Your Secrets: Defenses Against Pigeonhole Attacks

Evaluating the Effectiveness of Microarchitectural Hardware Fault Detection for Application-Specific Requirements