Accessories

Generating a trigger pulse at the right point in time is essential in fault injection (FI) and side channel analysis (SCA) testing, but clock jitter and random program interrupts make this difficult, resulting in inaccurate timing.

The DS1002A Pattern Based Trigger Generator solves this problem by generating a trigger pulse after detecting a pattern in the EM signal of a chip. A special narrow band-pass filter enables pattern detection even in noisy signals.

The DS1010A Precision XYZ Stage is the default XYZ stage for various Keysight hardware components which need accurate positioning above the device under test.

• Three high-precision stages with a small step size, small backlash, and small yaw
• Surface-ground steel carriage and high-precision screw pitch
• Base frame allows maximum flexibility for mounting device under test, from small smart cards to large printed circuit boards with significant height
• Frame holds XYZ stages in a fixed position during load and temperature changes

DS1020A Analysis Workstation is a standard PC workstation for the Inspector software package.

• 27” monitor
• 1 TB solid state drive (SSD) hard disk
• Windows 10
• 32 GB RAM

The DS1030A Software Crypto Training Target is a development board based on an ARM Cortex-M4F core working at a 168MHz clock speed. It has been physically modified and programmed to act as a training target for side channel analysis (SCA) and fault injection (FI) attacks. It may also be used for development and prototyping, thanks to the provided source code and integrated development environment (IDE).

• Challenging training target for both active FI attacks like differential fault analysis (DFA) and passive SCA attacks like differential power analysis (DPA)
• Accurately models current 32-bit embedded devices; HW crypto is implemented similar to current devices
• Stable behavior; robust against accidental permanent damage from FI
• Configurable countermeasures

The DS1031A Hardware Crypto Training Target is a development board based on an ARM Cortex-M4F core working at a 168MHz clock speed. It has been physically modified and programmed to act as a training target for side channel analysis (SCA) and fault injection (FI) attacks. The source code and integrated development environment (IDE) provided with the target allow it to also be used for development and prototyping.

• Challenging training target for both passive SCA attacks like differential power analysis (DPA) and active FI attacks like differential fault analysis (DFA)
• Accurately models current 32-bit embedded devices; HW crypto is implemented similar to current devices 
• Stable behavior; robust against accidental permanent damage from FI
• Configurable countermeasures

Protecting chips against laser fault attacks is one of the main security challenges in the smart card industry. With the DS1101A Fault Injection Laser System, perform advanced laser fault attacks that meet the highest international standards to assess if a smart card is secured against laser attacks. The DS1101A offers a set of new features meeting the latest timing and power requests from fault injection experts around the world. The special set of lasers with dedicated optics and ultra-fast and flexible control create the ultimate fault injection test solution. Its integration with the Inspector software further ensures that automation and analysis are covered by extendible modules which are flexible and easy to use.

• Supports front- and back-side attacks
• Integration with Inspector’s software and fault analysis modules
• Zoomable camera for easy navigation and automated Z-axis
• Fast multi-time glitching and accurate digital scaling with fast and predictable response to trigger pulse
• Multi-spot and IR navigation upgrades available
• Automatic scanning of a chip’s surface with integrated motorized XYZ stage
• Camera inspection of laser spot and location on chip area
• High repetition accuracy on motorized axes
• SDK available for integration into custom setups

Countermeasures for fault injection are becoming more advanced. To bypass some of these countermeasures, a security evaluator needs to be able to generate multiple laser pulses at different locations. The DS1102A lets you generate two laser spots with independent location and timing.

• Work with different laser sources
• Speed up the evaluation process
• Perform multi-pulse attacks with DPSS laser
• Control automated scanning with Inspector and motorized positioning of both laser spots
• Achieve high position accuracy and resolution
• Use the wide field of view to create a relatively large distance on die between two laser spots

The DS1103 mounts onto the DS1010A Precision XYZ Stage. It works with Keysight laser sources, Keysight diode lasers, DPSS lasers, and third-party lasers when a dovetail interface is available and the wavelength falls into the supported range.

• Mounts onto DS1010A Precision XYZ Stage
• Front-side attacks
• Support for 400 nm – 700 nm laser sources
• Color camera, 5X objective, and spot size reducer included

The DS1104 mounts onto the DS1010A Precision XYZ Stage. It works with Keysight laser sources, Keysight diode lasers, DPSS lasers, and third-party lasers when a dovetail interface is available and the wavelength falls into the supported range. 

• Mounts onto DS1010A Precision XYZ Stage
• Front-side and back-side attacks 
• Support for 700 nm – 1100 nm laser sources, including near infrared (NIR)
• NIR camera, 5X objective, and spot size reducer included

The DS1105A InGaAs Camera Mount is an adapter for mounting an InGaAs camera to the DS1101A Fault Injection Laser System, enabling the creation of photon emission images. These images will highlight active areas of the chip while in operation, helping to precisely identify areas that are vulnerable to fault injection attacks.

• C-mount adapter for camera
• Works with cameras weighing less than 500 g
• With adapter, field of view is about 3.8 mm x 3.1 mm with a 5X objective
• Includes 1200nm diode ring light
• Usable spectral range: T > 86 % at 1000 – 1300 nm, T > 65 % at 900 – 1400 nm

The DS1106A Laser Fault Injection Safety Box is a large safety box for laser fault injection testing.

• Inside workspace: 69 cm (w) x 65 cm (d) x 87.5 cm (h)
• Suitable for DS1101A Fault Injection Laser System and DS1102A Dual Laser Fault Injection System
• FDA and CE approved safe environment