3 ms·

Props for the effort, but who expects a cheap china MCU for consumer products to be resilient against glitching attacks? You don’t use that stuff in high-securi

Props for the effort, but who expects a cheap china MCU for consumer products to be resilient against glitching attacks? You don’t use that stuff in high-security settings anyway. For consumers products resilient to advanced hardware attacks, I can only think of the iPhone and some consoles. Anything else?

tyingq 7y ago
I assume it's to keep someone from cloning your product and underselling you with low effort. It's not the danger of one device being compromised.
Havoc 7y ago
>You don’t use that stuff in high-security settings anyway. Forgive my ignorance, but what would one use? i.e. what's the high-sec equivalent of a esp32?
- sigmaprimus 7y ago
  How about zigbee products? A few years ago I worked on the development of a wireless product for use in the traffic control industry. Security was of great importance and we opted to use a more costly "low power mcu radio combination" using the TI MSP430 series processors and Anaren radios. At the time we were more concerned with hackers spoofing our radios signals but thinking about it now the physical hacking of our firmware would be just as big of threat.
- SEJeff 7y ago
  https://www.arm.com/products/silicon-ip-security https://www.arm.com/products/silicon-ip-security https://www.arm.com/products/silicon-ip-cpu/securcore/sc300 https://www.arm.com/products/silicon-ip-cpu/securcore/sc300
  - Havoc 7y ago
    Cool. Thanks
- totallyabstract 7y ago
  Some silicon labs arm MCUs and radios have hardened crypto core and hardened bootloaders. Their closest equivalent to the esp32 is the wgm160p but it lacks Bluetooth and costs more. Disclaimer: used to work there but this is all public information
- aspectmin 7y ago
  We use these extensively for our higher security needs, yes it's Microsoft, but it's a great product and solves many problems in this space (Updating, security, etc.) https://azure.microsoft.com/en-us/services/azure-sphere/ https://azure.microsoft.com/en-us/services/azure-sphere/
deleted 7y ago
[deleted]

tyingq 7y ago

I assume it's to keep someone from cloning your product and underselling you with low effort. It's not the danger of one device being compromised.

Havoc 7y ago

>You don’t use that stuff in high-security settings anyway. Forgive my ignorance, but what would one use? i.e. what's the high-sec equivalent of a esp32?

sigmaprimus 7y ago
How about zigbee products? A few years ago I worked on the development of a wireless product for use in the traffic control industry. Security was of great importance and we opted to use a more costly "low power mcu radio combination" using the TI MSP430 series processors and Anaren radios. At the time we were more concerned with hackers spoofing our radios signals but thinking about it now the physical hacking of our firmware would be just as big of threat.
SEJeff 7y ago
https://www.arm.com/products/silicon-ip-security https://www.arm.com/products/silicon-ip-security https://www.arm.com/products/silicon-ip-cpu/securcore/sc300 https://www.arm.com/products/silicon-ip-cpu/securcore/sc300
- Havoc 7y ago
  Cool. Thanks
totallyabstract 7y ago
Some silicon labs arm MCUs and radios have hardened crypto core and hardened bootloaders. Their closest equivalent to the esp32 is the wgm160p but it lacks Bluetooth and costs more. Disclaimer: used to work there but this is all public information
aspectmin 7y ago
We use these extensively for our higher security needs, yes it's Microsoft, but it's a great product and solves many problems in this space (Updating, security, etc.) https://azure.microsoft.com/en-us/services/azure-sphere/ https://azure.microsoft.com/en-us/services/azure-sphere/

deleted 7y ago

[deleted]