Author:
Amini Elham,Jatzkowski Jörg,Kiyan Tuba,Renkes Lars,Krachenfels Thilo,Tajik Shahin,Boit Christian,Altmann Frank,Brand Sebastian,Seifert Jean-Pierre
Abstract
AbstractOptical probing methods through the chip backside have been demonstrated to be powerful attack techniques in the field of electronic security. However, these attacks typically require specific circuit conditions, such as enforcing gate or register switching at certain frequencies or repeating measurements over multiple executions to achieve an acceptable signal-to-noise ratio (SNR). Meeting these requirements can pose challenges, such as low-frequency switching or inaccessibility of the control signals. This study evaluates these requirements for contactless electron- and photon-based probing attacks by performing extensive experiments and discussing the advantages and drawbacks of each approach. Our findings demonstrate that E-beam probing has the potential to outperform optical methods in scenarios involving static or low-frequency circuit activities. Nevertheless, E-beam probing requires the assistance of optical techniques for area localization and requires aggressive thinning and trenching to the STI level.
Funder
Technische Universität Berlin
Publisher
Springer Science and Business Media LLC
Reference20 articles.
1. A. Schlösser, D. Nedospasov, J. Krämer, S. Orlic, J.-P. Seifert, Simple Photonic Emission Analysis of AES, in Cryptographic Hardware and Embedded Systems – CHES 2012. Lecture Notes in Computer Science. ed. by E. Prouff, P. Schaumont (Springer, Berlin, 2012), p.41–57. https://doi.org/10.1007/978-3-642-33027-8_3
2. M. Paniccia, T. Eiles, V. Rao, W.M. Yee, Novel optical probing technique for flip chip packaged microprocessors, in Proceedings International Test Conference 1998 (IEEE Cat. No. 98CH36270) (IEEE, 1998), pp. 740–747
3. U. Kindereit, G. Woods, J. Tian, U. Kerst, R. Leihkauf, C. Boit, Quantitative investigation of laser beam modulation in electrically active devices as used in laser voltage probing. IEEE Trans. Device Mater. Reliab. 7(1), 19–30 (2007)
4. T. Kiyan, H. Lohrke, C. Boit, Comparative assessment of optical techniques for semi-invasive SRAM data read-out on an MSP430 microcontroller, in ISTFA 2018: Proceedings from the 44th International Symposium for Testing And Failure Analysis (ASM International, 2018), p. 266
5. S. Tajik, H. Lohrke, J.-P. Seifert, C. Boit, On the power of optical contactless probing: attacking bitstream encryption of FPGAs, in Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security (CCS), (ACM, 2017), pp. 1661–1674. https://doi.org/10.1145/3133956.3134039