Hardware Podcasts

286: Twenty Cans of Gas (Repeat)

Embedded.fm · 12 Nov 2021 · 1h 00m · Episode 286

What this episode covers

Colin O'Flynn, CTO of NewAE Technology and an assistant professor, discusses his company's ChipWhisperer platform, which enables side-channel power analysis and fault injection attacks on embedded devices. He explains how differential power analysis recovers encryption keys by correlating power consumption with data bus activity, noting that while the technique is decades old, many IoT devices remain vulnerable. O'Flynn also covers FPGA design for precise timing, software countermeasures like masking, and the ethical implications of making security research tools accessible to both defenders and attackers.

Most relevant to

companies scaling up

Topics

Mentioned

Companies
NewAE Technology, Atmel, NXP
Products
ChipWhisperer, TinyFPGA
Chips
LPC55S66
Tools
MyHDL, Vivado
Also
Hackaday Prize, Fpga4fun.com

Related episodes from other shows

Other shows on the same ground, closest first.

  • Unnamed Reverse Engineering Podcast · 1h 15m

    038 - My Favorite Random Number is 5

    Colin O'Flynn, founder of NewAE Technology, explains how differential power analysis (DPA) and fault injection allow attackers to recover cryptographic keys from embedded devices by measuring minute power variations or disrupting clock/voltage signals. He details the mechanics of side-channel attacks, the importance of random number generation, and the limitations of 'military grade' encryption claims. O'Flynn also discusses his open-source tool ChipWhisperer, electromagnetic fault injection hardware like BADFET, and the broader industry challenges in securing IoT devices against such physical attacks.

    Debugging & failure analysisSecurity & privacy
    6 chapters

  • The Amp Hour · 1h 08m

    An Interview with Colin O'Flynn - Aspirated Adamantine Attacks

    Colin O'Flynn, creator of the ChipWhisperer project and a PhD student at Dalhousie University, explains how side-channel attacks like differential power analysis (DPA) can break AES-256 encryption on embedded devices by measuring tiny power fluctuations. He discusses the hardware design of the ChipWhisperer, including its high-speed ADC and FPGA, and contrasts the open-source ChipWhisperer Lite with the more feature-rich original version. O'Flynn also details his manufacturing decisions, explaining why he chose local Canadian fabrication over China to avoid component substitution issues and ensure quality for this niche, high-precision tool.

    Security & privacyPCB design & layout
    9 chapters

  • The Amp Hour · 1h 04m

    Shouting at chips with Colin O'Flynn

    Colin O'Flynn of NewAE Technology discusses his transition from academia to running a hardware security company, detailing his products like the Chip Whisperer and the new Chip Shouter. He explains side channel analysis and fault injection techniques, noting how consumer devices are slowly adopting countermeasures against these attacks. O'Flynn also addresses the severe supply chain challenges facing small hardware firms, specifically the cash flow strain caused by pre-buying expensive FPGAs during shortages, and announces his upcoming book, The Hardware Hacking Handbook.

    Security & privacySourcing & supply chain
    8 chapters

  • The Amp Hour · 1h 21m

    An Interview with Dmitry Nedospasov

    Dmitry Nedospasov, a hardware security researcher and founder of the startup Toothless, discusses his work in IC security and reverse engineering. He details invasive and semi-invasive techniques for analyzing chips, including using focused ion beams and infrared cameras to extract secrets from smart cards and pay TV systems. Nedospasov also explains his training curriculum at the RECon conference, which teaches engineers how to use FPGAs for protocol analysis and hardware hacking.

    Debugging & failure analysisMicrocontrollers & dev platforms
    7 chapters

  • The Amp Hour · 1h 07m

    Hardware Security with Matt Brown

    Matt Brown of Brown Find Security discusses hardware security best practices and reverse engineering techniques, using his analysis of a smart charcoal smoker as a primary case study. He explains how unencrypted flash storage and lack of key rotation on an ESP32-based device allowed him to extract private keys and intercept TLS traffic. The conversation covers the importance of threat modeling, the role of secure elements like the ATECC608, and the tools used for firmware dumping and RF analysis.

    Security & privacyDebugging & failure analysis
    7 chapters

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Embedded.fm. The episode itself belongs to its publisher.