Training Targets Fault Injection

A training target is a purpose-built hardware platform designed to help users learn, develop, and validate fault injection techniques. Unlike production devices, training targets are specifically engineered to expose security-relevant behavior and provide a repeatable environment for experimentation.

Training targets provide documented attack points, known cryptographic implementations, and predictable behavior, allowing users to focus on learning fault injection techniques and evaluation methodologies without the risk of damaging production hardware or disrupting development activities.

Training Targets are commonly used by:

• Hardware security researchers
• Evaluation laboratories
• Product security teams
• Certification facilities
• Universities and research institutions
• Engineers new to fault injection testing

The Training Targets support a variety of fault injection evaluations, including:

• Voltage fault injection
• Electromagnetic fault injection (EMFI)
• Optical fault injection
• Clock glitching
• Boot glitching
• Differential Fault Analysis (DFA)

The DS1030A focuses primarily on software-based cryptographic implementations, while the DS1031A includes hardware cryptographic functionality that more closely resembles the hardware accelerators found in modern secure devices. Together, they allow users to explore different fault injection attack methods, fault effects, and security challenges.

Software and hardware cryptographic implementations often respond differently to fault injection attacks and implement different protection mechanisms. Evaluating both provides a broader understanding of real-world targets, as production devices may implement cryptography in software, hardware, or a combination of both.

Yes. The Training Targets include configurable countermeasures that allow users to observe how security protections affect fault injection attack success rates and device behavior under fault conditions.

Yes. They provide a structured and repeatable environment for learning fault injection concepts and attack methodologies. At the same time, they are sophisticated enough to support advanced research, tool validation, and professional security evaluations.

Yes. The platforms are specifically designed to support both methodologies, allowing users to perform active fault injection attacks as well as passive side-channel measurements using the same target hardware.

The Training Targets integrate seamlessly with the Inspector software suite for test automation, execution, analysis, and reporting. They also include source code, development tools, and documentation, enabling custom experimentation and prototyping.

Yes. Source code, development tools, and documentation are provided to support customization, prototyping, research activities, and the development of new attack scenarios

The best choice depends on your evaluation goals. The DS1030A is ideal for exploring software-based cryptographic implementations, while the DS1031A enables evaluation of hardware cryptographic functionality and related fault injection attack scenarios. The Keysight Device Security team can help recommend the most appropriate platform for your training and research objectives.

The Training Targets support a range of fault injection methodologies, including voltage glitching, electromagnetic fault injection, optical fault injection, and timing-based attacks. This enables users to gain hands-on experience with many of the techniques used in real-world hardware security assessments.