Comment by tommiegannert

2 years ago

Much more complicated than the Cullen's hack at CCC, but I think that also required a bit of luck. This was an very interesting read in terms of solid research experimentation setup. We now have two really nice attacks on the RP2350 secure boot, and only a few months after release.

The Cullen observation that the OTP power supply wasn't being glitch detected was pretty damning and a much more devastating attack in practice. If you require decapping and lasers, anything is possible.

Thanks for the write-up!