phywhispererusb

PhyWhisperer-USB これは何でしょうか？これは、USB PHY上でトリガーをかける、FI（フォールトインジェクション）またはSCA（サイドチャネル解析）用のハードウェアトリガーです。必ず http://phywhispererusb.readthedocs.io/ のドキュメントもお読みください！ はじめるにあたり、以下のデモノートブックが用意されています。 データのスニッフィング 長時間キャプチャのストリーミング パケットでのトリガー PhyWhisperer-USB を入手する Crowd Supply については...

mmiotic

mmiotic 一个用于 MMIO 时序分析的探索性工具——对任意物理地址计时，并从延迟中剖析硬件。 它出人意料地适用于硬件逆向工程、虚拟机监控程序指纹识别、设备活动的侧信道分析、寄存器特征刻画、校准恶意触发条件，以及构造超长机器指令。 示例 逆向工程内存范围 物理内存的第一个兆字节是一个简单的入门示例，尽管其结构已广为人知。 延迟边界让我们能够划分地址空间，而无需依赖报告的内存布局。 1. 从一个简单的延迟扫描开始：sudo ./mmiotic --start-address 0x0 --end-address 0x100000 --stride 4 --count 20...

scared

SCAred scaredは、eShardチームがメンテナンスするサイドチャネル解析フレームワークです。 はじめに 必要条件 Scaredには、Python 3.11 、3.12 、3.13 と Numpy =2 が必要です。 お使いの環境に応じて、scared をインストールできます： ソースから pip で conda で conda でインストール 次のコマンドを実行するだけです： conda install -c eshard scared pip でインストール PythonのホイールはPypiから入手できます。次のコマンドを実行してください： pip install scar...

Early Detection of Hardware Trojans Using Neural Controlled Differential Equations and Analysis of Power Traces

Evolving Hardware Trojans pose a serious threat to modern digital systems by evading traditional detection through stealthy, adaptive behavior. Even recent methods that leverage advances in machine learning can only detect them after activation, leaving a critical window for potential security...

Vogls: A Fast Interactive Full-Timing Simulator for Pre-Silicon Power Side-Channel Analysis

Designing hardware circuits resistant to side-channel attacks increasingly relies on simulation to predict device leakage before fabrication. Current functional verification simulators are designed for extended correctness-checking runs and are ill-suited for producing large numbers of short trac...

Power Side-Channel Analysis of the CVA6 RISC-V Core at the RTL Level Using VeriSide

Security in modern RISC-V processors demands more than functional correctness: It requires resilience to side-channel attacks. This paper evaluates the vulnerability of the side channel of the CVA6 RISC-V core by analyzing software-based AES encryption uses an RTL-level power profiling framework...

CVE-2025-63094: Exposure of Sensitive Information to an Unauthorized Actor

XiangShan Nanhu V2 and XiangShan Kunmighu V3 were discovered to use speculative execution and indirect branch prediction, allowing attackers to access sensitive information via side-channel analysis of the data cache...

EUVD-2018-15469

Malware in sbrugna...

EUVD-2018-3837

Malware in sbrugna...

EUVD-2020-6057

Malware in sbrugna...

EUVD-2020-12334

Malware in sbrugna...

EUVD-2018-15547

Malware in sbrugna...

EUVD-2018-15474

Malware in sbrugna...

EUVD-2022-43800

Malicious code in bioql PyPI...

EUVD-2022-30857

Malicious code in bioql PyPI...

Transformers for Secure Hardware Systems: Applications, Challenges, and Outlook

The rise of hardware-level security threats, such as side-channel attacks, hardware Trojans, and firmware vulnerabilities, demands advanced detection mechanisms that are more intelligent and adaptive. Traditional methods often fall short in addressing the complexity and evasiveness of modern...

CVE-2022-26296

BOOM: The Berkeley Out-of-Order RISC-V Processor commit d77c2c3 was discovered to allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis...

CVE-2022-46487

Improper initialization of x87 and SSE floating-point configuration registers in the sconeentry component of SCONE before 5.8.0 for Intel SGX allows a local attacker to compromise the execution integrity of floating-point operations in an enclave or access sensitive information via side-channel...

Linux Distros Unpatched Vulnerability : CVE-2018-3639

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known...

Linux Distros Unpatched Vulnerability : CVE-2020-13844

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Arm Armv8-A core implementations utilizing speculative execution past unconditional changes in control flow may allow unauthorized disclosure of information to ...