Description
The device does not contain or contains incorrectly implemented circuitry or sensors to detect and mitigate voltage and clock glitches and protect sensitive information or software contained on the device.
Potential Impact
- Confidentiality: Gain Privileges or Assume Identity
How to Fix
Architecture and Design
At the circuit-level, using Tunable Replica Circuits (TRCs) or special flip-flops such as Razor flip-flops helps mitigate glitch attacks. Working at the SoC or platform base, level sensors may be implemented to detect glitches. Implementing redundancy in security-sensitive code (e.g., where checks are performed)also can help with mitigation of glitch attacks.
Detection Methods
- Manual Analysis: Put the processor in an infinite
loop, which is then followed by instructions
that should not ever be executed, since the
loop is not expected to exit. After the loop,
toggle an I/O bit (...
- Dynamic Analysis with Manual Results Interpretation: During the implementation phase where actual hardware is available, specialized hardware tools and apparatus such as ChipWhisperer may be used to check if the platform is indeed susceptible to voltage...
- Architecture or Design Review: Review if the protections against glitching merely transfer the attack target. For example, suppose a critical authentication routine that an attacker would want to bypass is given the protection of m...
Related Weaknesses
References
View on MITRE CWE Database →
