An Interview with Colin O'Flynn - Aspirated Adamantine Attacks

The Amp Hour · 5 Mar 2015 · 1h 08m · Episode 239

What this episode covers

Colin O'Flynn, creator of the ChipWhisperer project and a PhD student at Dalhousie University, explains how side-channel attacks like differential power analysis (DPA) can break AES-256 encryption on embedded devices by measuring tiny power fluctuations. He discusses the hardware design of the ChipWhisperer, including its high-speed ADC and FPGA, and contrasts the open-source ChipWhisperer Lite with the more feature-rich original version. O'Flynn also details his manufacturing decisions, explaining why he chose local Canadian fabrication over China to avoid component substitution issues and ensure quality for this niche, high-precision tool.

Mentioned

Companies
Atmel, DigiKey, MakerBot, Altium
Products
ChipWhisperer, ChipWhisperer Lite
Chips
SAM 3, FPGA
Also
AES-256, Differential Power Analysis, Dalhousie University, Kickstarter, Hackaday, DEF CON, Black Hat, Python, MATLAB

Other shows on the same ground, closest first.

  • Embedded.fm · 1h 00m

    286: Twenty Cans of Gas

    Colin O'Flynn, CTO of NewAE Technology and an assistant professor at Dalhousie University, explains how his ChipWhisperer platform enables side-channel power analysis and fault injection attacks to recover encryption keys from embedded devices. He details the mechanics of differential power analysis, noting that power consumption correlates with data bus activity, allowing attackers to iteratively recover secret keys from algorithms like AES. O'Flynn discusses the ethical implications of open-source security tools, arguing that making these attacks accessible helps designers implement better countermeasures like masking and key rotation before products reach the market. He also covers his work with FPGAs for precise timing control in attacks and his hiring needs for embedded security experts at his company.

  • Embedded.fm · 1h 00m

    286: Twenty Cans of Gas (Repeat)

    Colin O'Flynn, CTO of NewAE Technology and an assistant professor, discusses his company's ChipWhisperer platform, which enables side-channel power analysis and fault injection attacks on embedded devices. He explains how differential power analysis recovers encryption keys by correlating power consumption with data bus activity, noting that while the technique is decades old, many IoT devices remain vulnerable. O'Flynn also covers FPGA design for precise timing, software countermeasures like masking, and the ethical implications of making security research tools accessible to both defenders and attackers.

  • Unnamed Reverse Engineering Podcast · 1h 15m

    038 - My Favorite Random Number is 5

    Colin O'Flynn, founder of NewAE Technology, explains how differential power analysis (DPA) and fault injection allow attackers to recover cryptographic keys from embedded devices by measuring minute power variations or disrupting clock/voltage signals. He details the mechanics of side-channel attacks, the importance of random number generation, and the limitations of 'military grade' encryption claims. O'Flynn also discusses his open-source tool ChipWhisperer, electromagnetic fault injection hardware like BADFET, and the broader industry challenges in securing IoT devices against such physical attacks.

  • Unnamed Reverse Engineering Podcast · 1h 43m

    044 - Scots Army Knife

    Piotr Esden-Tempski of 1BitSquared discusses the company's role in manufacturing open-source hardware, specifically the Glasgow digital interface explorer, the iCEBreaker FPGA board, and the Black Magic Probe debugger. He explains the economic rationale for using an old Quad 4C pick-and-place machine for small-batch production and details how Glasgow uses an FPGA to dynamically generate hardware protocols via the nmigen HDL. The conversation also covers the geopolitical shift toward RISC-V in China, the challenges of debugging legacy industrial equipment, and the importance of documentation and community education in the open-source hardware ecosystem.

  • Embedded.fm · 45m

    3: Plenty of Candy, No Guns

    Phil King, a senior hardware engineer at Lytro, joins host Elecia White to discuss the intersection of hardware and software engineering. They cover Phil's interview techniques for software candidates, the critical importance of hardware constraints in embedded design, and the risks of counterfeit components in overseas manufacturing. The conversation also touches on their shared history at ShotSpotter and Leapfrog, and the specific challenges of prototyping and testing.

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by The Amp Hour. The episode itself belongs to its publisher.