C.: A Versatile Framework for Implementation Attacks on Cryptographic RFIDs and Embedded Devices

Abstract. We present a unified framework for advanced implementa-tion attacks that allows for conducting automated side-channel analysis and fault injection targeting all kinds of embedded cryptographic de-vices including RFIDs. Our proposed low-cost setup consists of modular functional units that can be interchanged, depending on the demands of a concrete attack scenario. We give details of customized modules for the communication with many types of embedded devices and other modules that allow to inject various types of faults. An FPGA-based ap-proach enables very accurate timing and flexible adaption to any exten-sion module. The corresponding data acquisition system for side-channel attacks makes precise power and EM analyses possible. Our setup fa-cilitates the promising combination of active and passive techniques, which is known to render many established security countermeasures ineffective. We introduce several methods for the automatic profiling of cryptographic devices and model their behaviour both with respect to side-channel analysis and fault injection. To demonstrate the capabilities of our framework, we perform the first practical full key-recovery on a cryptographic contactless smartcard employing Triple-DES reported in the literature and inject multiple faults in a widespread microcontroller. We thereby disprove the common belief that highly sophisticated and expensive equipment is required to conduct such attacks. Rather, we il-lustrate a cost-effective setup that can be tailored to any desired type of security evaluation or penetration test