PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Hacking crypto Part III: Hardware

bugcrowd.com | blog | #ai-security | #cryptography | #fault-injection | #hardware-hacking | #hardcoded-keys | #side-channel-attacks | #jtag
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Nerdwell's hardware guide covers five high-impact attack vectors: side-channel analysis, hardcoded keys, unprotected debug interfaces, missing cryptographic authentication, and fault injection.
Published
Collected

Related coverage

research · eshard.com
Webinar: Exploiting Physical Vulnerabilities of Keccak in PQC
See how SASCA and fault injection exploit Keccak's physical vulnerabilities in real post-quantum cryptography implementations.
blog · bugcrowd.com
Hacking Crypto Part IV: Web and mobile applications
The final Hacking Cryptography installment covers JWT signature flaws, weak token and key generation, hardcoded keys, padding oracles, and improper IV use in web and mobile apps.
blog · bugcrowd.com
Setting up your first hardware hacking lab
A beginner-friendly guide to building a hardware hacking lab on a budget, covering workspace setup, screwdriver kits, ESD-safe tweezers, magnifiers, multimeters for PCB work, and soldering equipment.
blog · bugcrowd.com
Inside the Mind of a Hacker: 2024 Edition
Bugcrowd's eighth annual ITMOAH report draws on nearly 1,300 hackers, finding hardware hacking on the rise as AI infrastructure grows and hacking a viable flexible income source.
blog · bugcrowd.com
A guide to Bluetooth Low Energy hacking
An educational guide to Bluetooth Low Energy hacking: how radio waves and frequency shift keying carry binary data, plus techniques for attacking BLE-enabled devices.
blog · bugcrowd.com
How to hack with the Flipper Zero
A hands-on guide to the Flipper Zero: CC1101 sub-GHz radio for capturing and replaying garage and car keyfob signals, plus reading and writing NFC/RFID access cards like hotel and transit cards.
Back