I'm trying to get some practical experience on (side channel) attacks. First I want to note all possible vulnerabilities. I thought about:
I have physical access and I own/wrote the software, that will be run on that device. It is for academic purpose.
- (no side channel) Adressing special secure memory. If there is a function/protocol on that µC, which is able to edit those information (say on a eeprom) and, therefore, can read such stored information (like keys), then I may be able to abuse that function/protocol. I thought about manipulating the firmware in such a manner, that I define the operating address and call the function.
- Sending multibyte characters. Do such stuff has any effect? I will read some information from a smardcard, which sends a string of defined length (3mb). If there is an information set, like a multibyte character, could I enforce a restart while reading or displaying those? (Like iPhone..)
- Starting with reduced power. (WDT is active..)
- Starting with increased energy.
- Typical errors? (I'm out of that for 6 month now, I do not know many specs of the PIC18 currently, while writing this post)
Could someone point out attacking vectors, I have missed, or which probably will fail or have no relevance? What do I have to check, if I want to ensure, that some Information, that are loaded through the smartcard, will have to effect?
The loaded information are a "string", those will be stored on memory, encrypted. If I want to display those, I need to decrypt first.
I hope, I'm not that much confusing right now and you get my issue.