2026-09-20 06:49 UTC
@hackaday@hackaday.social The original article is pretty cool --> https://donjon.ledger.com/blog/rp2350-secure-debug-laser-fault-injection/
Summarized from their TL;DR:
- destructive process; uses lab equipment worth 250kUSD
- photon emission microscopy finds debug-enable registers on RP2350 A4 die
- fire laser pulses at die to restore debug access (which had been permanently disabled in the chip's OTP config) to the chip’s Secure world
- recover secret from OTP memory.
🤯
(Also, the photos...!)
Replies (1)
-
@eoinho@mastodon.world 2026-09-20 19:43
@ei_ai@mastodon.pwei.at @hackaday@hackaday.social Took me second to twig the 'benefit' of all this expensive effort: - the hacker now has the private key!