Donjon is the Security Research team at @Ledger. Follow us to get the the latest news from our research.
More info on our blog: ledger-donjon.github.io
We regularly communicate about the results we achieve. But sometimes, the journey matters just as much as the result.
We recently managed to bypass the RP2350-A4 debug protection using an innovative approach combining two techniques: photon emission imaging and laser fault
Lasers. Microscopes. $250K. One secured chip.
Ledger Donjon just showed how they cracked debug access on RP2350-A4, a break worthy of Raspberry Pi's own Hacking Challenge.
Respin or no respin? Raspberry Pi says no. Read why: raspberrypi.com/news/everythin…
We’re releasing an open EM side-channel dataset for ML-KEM (Kyber) 🔓
• 200k traces × 3 implementations (ref, pqm4, masked mkm4)
• Windowed on the pair-pointwise polynomial multiplication
• Per-share traces for 2nd-order analysis
• STM32F407 Cortex-M4, NumPy format
Lowering
Our applied PQC series continues.
This time, @k15ab_ and @6c656e69 attack masked Kyber768.
Masking defeats first-order SCA. But with a centered cross-product and the right covariance model, a second-order CPA recovers the secret coefficient.
