That's what I believe Aedan did, started by just varying the timing of the glitch until he got lucky if I recall right. Once lucky it's just a matter of using that information.Yes, the guy did it with esp32 and mosfet when glitching nrf52840 https://www.youtube.com/watch?v=tMPD0kBG_So same setup (even software) can be possibly used for RP2350. It is just about timing it right, but you can simply let it run for some time and it will eventually find it.Maybe it can be replicated using nothing more than a MOSFET for mere pennies ?
It was not plain sailing. There were dead ends, analysis, thinking, and testing involved. But the thing is; it's not how long it takes to think up attack vectors, test and refine them, make something work, which is the measure of security.
Once an attack has been found it's how quickly, easily and cheaply, the secret sauce can be extracted by someone else.
If it's cheap and easy, and anyone can do it, there is effectively no security.
Statistics: Posted by hippy — Mon Mar 17, 2025 4:57 pm