Low-Cost Body Biasing Injection (BBI) Attacks on WLCSP Devices

Body Biasing Injection (BBI) uses a voltage applied with a physical probe onto the backside of the integrated circuit die. Compared to other techniques such as electromagnetic fault injection (EMFI) or Laser Fault Injection (LFI), this technique appears less popular in academic literature based on published results. It is hypothesized being due to (1) moderate cost of equipment, and (2) effort required in device preperation. This work demonstrates that BBI (and indeed many other backside attacks) can be trivially performed on Wafer-Level Chip-Scale Packaging (WLCSP), which inherently expose the die backside. A low-cost ($15) design for the BBI tool is introduced, and validated with faults introduced on a STM32F415OG against code flow, RSA, and some initial results on various hardware block attacks are discussed

Diagnostic significance of CK19, TG, Ki67 and galectin-3 expression for papillary thyroid carcinoma in the northeastern region of China

<p>Abstract</p> <p>Background</p> <p>To evaluate the expression and differential diagnostic significance of CK19, TG, Ki67 and galectin-3 in papillary thyroid carcinoma (PTC) (metastatic and non metastatic), follicular adenoma and nodular goiter in patients from the northeastern part of China.</p> <p>Methods</p> <p>441 PTC specimens and 151 other benign thyroid specimens (97 cases of nodular goiter, 54 cases of nonmalignant follicular adenoma) were collected. Immunohistochemistry for CK19, TG, Ki67 and galectin-3 was performed.</p> <p>Results</p> <p>CK19, TG, Ki67 and galectin-3 expression was 96.37% (425/441), 82.77% (365/441), and 40.59% (179/441), 96.82% (427/441), respectively, for the PTC group and the expression of these markers in the benign thyroid lesions group was 25.83% (39/151), 79.47% (120/151), and 37.09% (56/151), 50.99% (77/151), respectively. The expression of CK19 and galectin-3 in PTC was much higher than that in the nonmalignant group (p < 0.05). However, the expression of TG, Ki67 did not differ among these two groups (p > 0.05). The diagnostic efficiency of CK19 and galectin-3 for PTC was 96.37% (537/592) and 84.63% (501/592). CK19 and galectin-3 expression rate in PTC was higher than that in benign disease cases.</p> <p>Conclusions</p> <p>The diagnostic efficiency of CK19 for PTC was slightly better than galectin-3. The utilization of these markers combined with morphologic evaluation may be helpful in the differential diagnosis of papillary thyroid carcinoma in the northeastern region of China.</p

Optimizing Electromagnetic Fault Injection with Genetic Algorithms

Contains fulltext : 204497.pdf (publisher's version ) (Open Access

A Fast Characterization Method for Semi-invasive Fault Injection Attacks

Semi-invasive fault injection attacks are powerful techniques well-known by attackers and secure embedded system designers. When performing such attacks, the selection of the fault injection parameters is of utmost importance and usually based on the experience of the attacker. Surprisingly, there exists no formal and general approach to characterize the target behavior under attack. In this work, we present a novel methodology to perform a fast characterization of the fault injection impact on a target, depending on the possible attack parameters. We experimentally show our methodology to be a successful one when targeting different algorithms such as DES and AES encryption and then extend to the full characterization with the help of deep learning. Finally, we show how the characterization results are transferable between different targets.Green Open Access added to TU Delft Institutional Repository 'You share, we take care!' - Taverne project https://www.openaccess.nl/en/you-share-we-take-care Otherwise as indicated in the copyright section: the publisher is the copyright holder of this work and the author uses the Dutch legislation to make this work public.Cyber Securit

Practical Fault Injection on Deterministic Signatures: The Case of EdDSA

Contains fulltext : 191724.pdf (Publisher’s version ) (Open Access

S-box Pipelining Using Genetic Algorithms for High-Throughput AES Implementations: How Fast Can We Go?

In the last few years, several practitioners have proposed a wide range of approaches for reducing the implementation area of the AES in hardware. However, an area-throughput trade-off that undermines high-speed is not realistic for real-time cryptographic applications. In this manuscript, we explore how Genetic Algorithms (GAs) can be used for pipelining the AES substitution box based on composite field arithmetic. We implemented a framework that parses and analyzes a Verilog netlist, abstracts it as a graph of interconnected cells and generates circuit statistics on its elements and paths. With this information, the GA extracts the appropriate arrangement of Flip-Flops (FFs) that maximizes the throughput of the given netlist. In doing so, we show that it is possible to achieve a 50 % improvement in throughput with only an 18 % increase in area in the UMC 0.13 um low-leakage standard cell library