[HGI-News-de] [HGI-Mitglieder] HGI-Kolloquium am 15.01.2015: "Breaking Integrated Circuit Device Security through Test Mode Silicon Reverse Engineering"

[Newsletter des Horst Görtz Instituts]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Sehr geehrte Damen und Herren,

im Rahmen des HGI-Kolloquiums, organisiert vom Lehrstuhl für Netz- und
Datensicherheit und dem Horst-Görtz-Institut der Ruhr-Universität
Bochum, wird Markus Kammerstetter vom Vienna University of Technology
am Donnerstag, 15.01.2015 **um 14 Uhr s.t. in Raum ID 04/459** über
folgendes Thema referieren:

"Integrated Circuit (IC) device manufacturing is a challenging task and
often results in subtle defects that can render a chip unusable. To
detect these defects at multiple stages during the IC production
process, test modes are inserted (Design For Testability).
On the downside, attackers can use these test modes to break IC device
security and extract sensitive information such as the firmware
implementation or secret key material. While in high security smart
cards the testing circuits are physically removed during production
for this reason, in the majority of digital ICs the testing modes
remain intact. Often they are undocumented, well-hidden and contain
secret test commands.
Utilizing search algorithms and/or side channel information, several
attacks on secret testing modes have been presented lately.
Accordingly, countermeasures that frequently rely on obfuscation
techniques have been proposed as more advanced cryptographic methods
would require significantly more space on the die and thus cause higher
production costs.
In this work, we show that limited effort silicon reverse engineering
can be effectively used to discover secret testing modes and that
proposed obfuscation based countermeasures can be circumvented without
altering the analysis technique. We describe our approach in detail at
the example of a proprietary cryptographic game authentication chip of
a well known gaming console and present an FPGA implementation of the
previously secret authentication algorithm."

Zu diesem und sämtlichen weiteren Vorträgen des HGI-Kolloquiums sind
alle Studenten und Interessierten herzlich eingeladen!
Eine Voranmeldung ist nicht erforderlich!

Weitere Informationen gibt es auf folgender Webseite:
http://hgi.rub.de/hgi/Aktuelles/hgi-seminar/

Mit freundlichen Grüßen,
Christoph Bader
- -- 
Dipl.-Math. Christoph Bader

Horst Görtz Institute for IT-Security
Chair for Network and Data Security
Ruhr-University Bochum, Germany

Universitätsstr. 150, ID 2/461
D-44801 Bochum, Germany
http:// www.nds.rub.de

Telefon: +49 (0) 234 / 32-25030
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)

iQEcBAEBAgAGBQJUs9KvAAoJEO79b5R6Hnz5fqYIAKaAp5X8RjfkblVk1b6S6fAK
4nUPVLstmLdxztrqd8Hjil2+KULNesdumOaMnhqxSlDcF78s8GMewz7ZkUfpY8jq
j9ib6eSV6VJ1X1nqkGvTpAKhCxGojOrrjhsIWgI1TFU1NTfVX9lyQ8uwNuMozk5K
m8LMFbfSkJr9Z8DU91iqrZpUEVmJxeKM0WNp+xhuU9016Flhgo5es0PD5H4f7jmn
B88SQUTqXIYi5VzZ3vzrWLXvXPQcMu4JUpj5FG8FoOM9eC90/xjRMRpyKb8Ugex0
R8cY/AhjquVggq5ZdBwwvJFyzbrMgaHoBu3msg/RplU7V31qZgn5JXP2oxXm1ns=
=gymo
-----END PGP SIGNATURE-----