4 ms·
Attacker needs physical access to just one device in the whole product line that uses the same encryption key. After that, all you need is to get the device to
by Nokinside 6y ago
Attacker needs physical access to just one device in the whole product line that uses the same encryption key.
After that, all you need is to get the device to update using the bitstream you made. In some cases this could be remote attack.
- IshKebab 6y agoI'm not sure this is true. This attack allows reading the encrypted bitstream, but it doesn't say anything about allowing you to sign modified bitstreams.
- nebulous1 6y ago> In this paper, we introduce novel low-cost attacks against the Xilinx 7-Series (and Virtex-6) bitstream encryption, resulting in the total loss of authenticity and confidentiality This seems to be saying that it's possible
- teraflop 6y agoAs the paper explains, there is no "signing" involved (in the sense of a public-key cryptosystem). Each encrypted bitstream includes an HMAC, but because the HMAC key is part of the encrypted bitstream itself, it basically only acts like a non-cryptographic checksum. An attacker who knows the encryption key can simply choose an arbitrary HMAC key and generate a valid HMAC for arbitrary data. EDIT: I should clarify that this attack doesn't appear to actually let someone extract the AES encryption key. But they can use an FPGA that has the key programmed as a decryption oracle. And a weakness of CBC mode is that a decryption oracle can be used for encryption as well.
- IshKebab 6y agoAh interesting, thanks!