Formal verification of a software countermeasure against instruction skip attacks

Fault attacks against embedded circuits enabled to define many new attack paths against secure circuits. Every attack path relies on a specific fault model which defines the type of faults that the attacker can perform. On embedded processors, a fault model consisting in an assembly instruction skip can be very useful for an attacker and has been obtained by using several fault injection means. To avoid this threat, some countermeasure schemes which rely on temporal redundancy have been proposed. Nevertheless, double fault injection in a long enough time interval is practical and can bypass those countermeasure schemes. Some fine-grained countermeasure schemes have also been proposed for specific instructions. However, to the best of our knowledge, no approach that enables to secure a generic assembly program in order to make it fault-tolerant to instruction skip attacks has been formally proven yet. In this paper, we provide a fault-tolerant replacement sequence for almost all the instructions of the Thumb-2 instruction set and provide a formal verification for this fault tolerance. This simple transformation enables to add a reasonably good security level to an embedded program and makes practical fault injection attacks much harder to achieve

On the carbon abundance in Comet Halley derived from the 3 micron feature: Comparison with interstellar dust

In spite of some similarities with the infrared features observed in the interstellar medium, the 3 micron signature observed in comet Halley's spectrum shows two distinct differences: (1) the 3.28 micron and 3.37 micron cometary features are both in emission, while the 3.37 micron interstellar feature is most often observed in absorption; and (2) there is no associated emission feature beyond 6 micron in the cometary spectrum. These two facts can be simply explained if it is assumed that the excitation mechanism is resonance fluorescence by the solar IR radiation field. With this assumption, it is found that hydrocarbons are present in roughly equal quantities in both the saturated forms, with a total carbon abundance of about 30 percent of H2O. This carbon abundance can be compared with the abundances derived for the interstellar dust when all condensed (or condensable) components are considered

Confirmation of circumstellar phosphine

Phosphine (PH3) was tentatively identified a few years ago in the carbon star envelopes IRC+10216 and CRL2688 from observations of an emission line at 266.9 GHz attributable to the J=1-0 rotational transition. We report the detection of the J=2-1 rotational transition of PH3 in IRC+10216 using the HIFI instrument on board Herschel, which definitively confirms the identification of PH3. Radiative transfer calculations indicate that infrared pumping to excited vibrational states plays an important role in the excitation of PH3 in the envelope of IRC+10216, and that the observed lines are consistent with phosphine being formed anywhere between the star and 100 R* from the star, with an abundance of 1e-8 relative to H2. The detection of PH3 challenges chemical models, none of which offers a satisfactory formation scenario. Although PH3 locks just 2 % of the total available phosphorus in IRC+10216, it is together with HCP, one of the major gas phase carriers of phosphorus in the inner circumstellar layers, suggesting that it could be also an important phosphorus species in other astronomical environments. This is the first unambiguous detection of PH3 outside the solar system, and a further step towards a better understanding of the chemistry of phosphorus in space.Comment: Accepted for publication in ApJ Letter

Experimental evaluation of two software countermeasures against fault attacks

Injection of transient faults can be used as a way to attack embedded systems. On embedded processors such as microcontrollers, several studies showed that such a transient fault injection with glitches or electromagnetic pulses could corrupt either the data loads from the memory or the assembly instructions executed by the circuit. Some countermeasure schemes which rely on temporal redundancy have been proposed to handle this issue. Among them, several schemes add this redundancy at assembly instruction level. In this paper, we perform a practical evaluation for two of those countermeasure schemes by using a pulsed electromagnetic fault injection process on a 32-bit microcontroller. We provide some necessary conditions for an efficient implementation of those countermeasure schemes in practice. We also evaluate their efficiency and highlight their limitations. To the best of our knowledge, no experimental evaluation of the security of such instruction-level countermeasure schemes has been published yet.Comment: 6 pages, 2014 IEEE International Symposium on Hardware-Oriented Security and Trust (HOST), Arlington : United States (2014

Detection of parent molecules in the IR spectrum of P/Halley with the IKS-Vega spectrometer

The two spectroscopic channels of the IKS experiment on board the Vega probes were designed for the detection of emission bands of parent molecules and/or cometary dust, in the 2.5 to 5 micrometer range and the 6 to 12 micron range respectively. On Vega 1, the experiment worked successfully, and cometary spectra were recorded at distances from the comet nucleus ranging from about 250,000 to 40,000 km. The field of view was 1 deg and the spectral resolving power was about 50. On Vega 2, no result could be obtained due to a failure of the cryogenic system. The emission spectra obtained are briefly analyzed

Seasonal Variability In The Ionosphere Of Uranus

Infrared ground-based observations using IRTF, UKIRT, and Keck II of Uranus have been analyzed as to identify the long-term behavior of the H-3(+) ionosphere. Between 1992 and 2008 there are 11 individual observing runs, each recording emission from the H-3(+) Q branch emission around 4 mu m through the telluric L' atmospheric window. The column-averaged rotational H-3(+) temperature ranges between 715 K in 1992 and 534 K in 2008, with the linear fit to all the run-averaged temperatures decreasing by 8 K year(-1). The temperature follows the fractional illumination curve of the planet, declining from solstice (1985) to equinox (2007). Variations in H-3(+) column density do not appear to be correlated to either solar cycle phase or season. The radiative cooling by H-3(+) is similar to 10 times larger than the ultraviolet solar energy being injected to the atmosphere. Despite the fact that the solar flux alone is incapable of heating the atmosphere to the observed temperatures, the geometry with respect to the Sun remains an important driver in determining the thermospheric temperature. Therefore, the energy source that heats the thermosphere must be linked to solar mechanisms. We suggest that this may be in the form of conductivity created by solar ionization of atmospheric neutrals and/or seasonally dependent magnetospherically driven current systems.STFC PP/E/000983/1, ST/G0022223/1RCUKGemini ObservatoryNational Aeronautics and Space Administration (NASA) NXX08A043G, NNX08AE38AAstronom

Hdo And SO2 Thermal Mapping On Venus: Evidence For Strong SO2 Variability

We have been using the TEXES high-resolution imaging spectrometer at the NASA Infrared Telescope Facility to map sulfur dioxide and deuterated water over the disk of Venus. Observations took place on January 10-12, 2012. The diameter of Venus was 13 arcsec, with an illumination factor of 80%. Data were recorded in the 1344-1370 cm(-1) range (around 7.35 mu m) with a spectral resolving power of 80 000 and a spatial resolution of about 1.5 arcsec. In this spectral range, the emission of Venus comes from above the cloud top (z = 60-80 km). Four HDO lines and tens of SO2 lines have been identified in our spectra. Mixing ratios have been estimated from HDO/CO2 and SO2/CO2 line depth ratios, using weak neighboring transitions of comparable depths. The HDO maps, recorded on Jan. 10 and Jan. 12, are globally uniform with no significant variation between the two dates. A slight enhancement of the HDO mixing ratio toward the limb might be interpreted as a possible increase of the D/H ratio with height above the cloud level. The mean H2O mixing ratio is found to be 1.5 +/-0.75 ppm, assuming a D/H ratio of 0.0312 (i.e. 200 times the terrestrial value) over the cloud deck. The SO2 maps, recorded each night from Jan. 10 to Jan. 12, show strong variations over the disk of Venus, by a factor as high as 5 to 10. In addition, the position of the maximum SO2 mixing ratio strongly varies on a timescale of 24 h. The maximum SO2 mixing ratio ranges between 75 +/-25 ppb and 125 +/-50 ppb between Jan. 10 and Jan. 12. The high variability of sulfur dioxide is probably a consequence of its very short photochemical lifetime.NASA NNX-08AE38A, NNX08AW33G S03NSF AST-0607312, AST-0708074Astronom

HDO And SO2 Thermal Mapping On Venus II. The So2 Spatial Distribution Above And Within The Clouds

Sulfur dioxide and water vapor, two key species of Venus photochemistry, are known to exhibit significant spatial and temporal variations above the cloud top. In particular, ground-based thermal imaging spectroscopy at high spectral resolution, achieved on Venus in January 2012, has shown evidence for strong SO2 variations on timescales shorter than a day. We have continued our observing campaign using the TEXES high-resolution imaging spectrometer at the NASA InfraRed Telescope Facility to map sulfur dioxide over the disk of Venus at two different wavelengths, 7 mu m (already used in the previous study) and 19 mu m. The 7 mu m radiation probes the top of the H2SO4 cloud, while the 19 mu m radiation probes a few kilometers below within the cloud. Observations took place on October 4 and 5, 2012. Both HDO and SO2 lines are identified in our 7-mu m spectra and SO2 is also easily identified at 19 mu m. The CO2 lines at 7 and 19 mu m are used to infer the thermal structure. An isothermal/inversion layer is present at high latitudes (above 60 N and S) in the polar collars, which was not detected in October 2012. The enhancement of the polar collar in October 2012 is probably due to the fact that the morning terminator is observed, while the January data probed the evening terminator. As observed in our previous run, the HDO map is relatively uniform over the disk of Venus, with a mean mixing ratio of about 1 ppm. In contrast, the SO2 maps at 19 mu m show intensity variations by a factor of about 2 over the disk within the cloud, less patchy than observed at the cloud top at 7 mu m. In addition, the SO2 maps seem to indicate significant temporal changes within an hour. There is evidence for a cutoff in the SO2 vertical distribution above the cloud top, also previously observed by SPICAV/SOIR aboard Venus Express and predicted by photochemical models.NASA NNX-08AE38AIRTF AST-0607312, AST-0708074Astronom

Modeling a Cache Coherence Protocol with the Guarded Action Language

We present a formal model built for verification of the hardware Tera-Scale ARchitecture (TSAR), focusing on its Distributed Hybrid Cache Coherence Protocol (DHCCP). This protocol is by nature asynchronous, concurrent and distributed, which makes classical validation of the design (e.g. through testing) difficult. We therefore applied formal methods to prove essential properties of the protocol, such as absence of deadlocks, eventual consensus, and fairness.Comment: In Proceedings MARS/VPT 2018, arXiv:1803.0866