Hardware Security

Which is NOT a countermeasure against fault injection attacks?

  1. APlacing sensors that detect voltage or clock anomalies and stopping when they trigger
  2. BPerforming important checks only once to speed up processing
  3. CComputing critical results twice or verifying them inversely, withholding output on mismatch
Show answer and explanation

Answer: B. Performing important checks only once to speed up processing

Fault injection tries to defeat protection with a single induced error, so a check performed only once becomes the weak point. Countermeasures include sensors for voltage, clock and light, redundancy that repeats critical computations or comparisons and cross-checks the results, and responses such as erasing keys when a fault is detected. Software also double-checks critical branches and uses success and failure codes that differ in many bits.

  • A. This is an effective countermeasure.
  • B. Correct. A single check can be skipped by a single glitch.
  • C. This is an effective countermeasure.
Practice this topic Back to topic

More Hardware Security questions

  1. Which is a countermeasure against DRAM Rowhammer?
  2. Which correctly pairs why cold boot attacks work with a typical countermeasure?
  3. Which describes secure boot?
  4. What is the most suitable thing placed inside the chip as the root of trust for secure boot?
  5. What is the advantage of using public-key cryptography to verify software signatures in secure boot?