The Underhanded Hardware Challenge
posted Aug 21st 2008 9:00pm by Eliot Phillipsfiled under: contests, security hacks
The Polytechnic Institute of NYU is hosting an interesting embedded systems contest. They’ve constructed a solid state cryptographic device that uses a 128-bit private key. Contestants will be tasked with designing and implementing several trojans into the system that will undermine the security. The system is built on a Digilent BASYS Spartan-3 FPGA board. The trojans could do a wide variety of things: transmitting unencrypted, storing and transmitting previously entered plain text, or just shutting down the system entirely. The modified devices still need to pass the factory testing procedure though, which will measure power consumption, code size, and function. After a qualification round, participants will be given the necessary hardware to compete.
[via NYC Resistor (Happy Birthday!)]
This does seem interisting, and should be a lot of fun for your FPGA guys (personally I am not very fond of them after having to do some work with with at work….). Seems like the fact that they don’t md5 the binaries before burning them makes this too easy… The hardest part would be finding a way to cut the fat on a bit of existing code, then just add a little state machine that looks for magic sequences on the input and acts accordingly, possibly adding a few random gates to make the binary the exact size as the original.
Posted at 9:24 pm on Aug 21st, 2008 by ...