FPGA et extraction de firmware - Siddique Vally-Adam

Value of the Information & Strength of the Argument

The talk provides valuable practical insights into FPGA-based firmware extraction, a niche area with limited accessible resources. The speaker’s hands-on experience is evident, and he effectively explains complex concepts like FSM and UART in an accessible manner. The argumentation is coherent, progressing from basic FPGA principles to a concrete attack methodology. However, the presentation is somewhat informal and lacks depth in certain areas, such as the specifics of glitch timing and countermeasures.

Scientific Rigor, Source Quality, Title Accuracy

The speaker references tools like Vivado and mentions a training by Dmitry Nedospasov, but does not provide formal citations or sources. The title accurately reflects the content. The talk is based on the speaker’s expertise and practical experience rather than peer-reviewed literature, which limits its scientific rigor but enhances its practical relevance.

The title accurately reflects the content, which focuses on using FPGAs for firmware extraction.

7/10

The speaker demonstrates practical expertise in FPGA-based firmware extraction, with a hands-on approach and references to real tools and techniques. However, the presentation is informal, lacks detailed citations, and some technical explanations are simplified.

Markers derived by PSI from the transcript: the creator did not define chapters.

• 02:00Introduction to the speaker and the topic of FPGA-based firmware extraction.
• 05:00Explanation of FPGA basics and comparison with microcontrollers.
• 10:00Discussion of logic gates, flip-flops, and multiplexers as building blocks.
• 15:00Introduction to Vivado and Verilog for FPGA design.
• 20:00Detailed explanation of UART communication and its implementation in FPGA.
• 25:00Overview of fault injection techniques for bypassing firmware protections.
• 30:00Description of the glitch attack methodology using Python and FPGA.
• 35:00Discussion of countermeasures and limitations of the approach.

• AMD Vivado — Mentioned as the primary FPGA design tool used in the demonstration.
• Dmitry Nedospasov's training — Referenced as a source of the methodology for hardware hacking.

• FPGA-based glitch attacks — The speaker's methodology aligns with known research on FPGA-based glitch attacks.

• Countermeasures to fault injection — The talk briefly mentions countermeasures but does not provide a comprehensive analysis, which could be seen as a limitation.