Raiden - open source pulse generator on the battlefield
summary
An open-source Verilog-based software generator called Raiden produces voltage and electromagnetic fault-injection pulses using an FPGA (tested on a Xilinx Arty A7-35) with ~10 ns resolution. It provides a user-friendly API so researchers can modify and extend fault-injection functionality in software without changing hardware, and has been used to bypass LPC microcontroller CRP3 and USB stack protections on STM devices.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:05Attack scenario
- 5:19Clock signal basics
- 10:27Raiden project origins
- 18:24Connecting and controlling Raiden
- 25:15Practical signal generation
- 33:23USB device attack
- 39:16Live attack demo
- 42:50Signal parameter changes
- 43:59Summary
related talks
43mRaiden Glitching Framework
43mImplementing Practical Electrical Glitching Attacks
46mChip.Fail - Glitching the Silicon of the Connected World
04mBridging the Glitch Gap: Hash Salehi on Making Professional Fault Injection Accessible
16mSoftware-driven Hardware in the Data Center: LibreBMC, Renode, RowHammer...
30mAffordable EMFI Attacks Against Modern IoT Chips
21mGlitchGlück: Enabling Software Vulnerabilities through Guided Hardware Fault Injection
20mOpen-Source FPGAs: Tools, Flows, and Visualization