{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,25]],"date-time":"2025-03-25T14:17:51Z","timestamp":1742912271214,"version":"3.40.3"},"publisher-location":"Cham","reference-count":41,"publisher":"Springer Nature Switzerland","isbn-type":[{"type":"print","value":"9783031544088"},{"type":"electronic","value":"9783031544095"}],"license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-3-031-54409-5_2","type":"book-chapter","created":{"date-parts":[[2024,2,22]],"date-time":"2024-02-22T06:08:12Z","timestamp":1708582092000},"page":"23-42","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["An In-Depth Security Evaluation of\u00a0the\u00a0Nintendo DSi Gaming Console"],"prefix":"10.1007","author":[{"given":"pcy","family":"Sluys","sequence":"first","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5740-5066","authenticated-orcid":false,"given":"Lennert","family":"Wouters","sequence":"additional","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5866-1990","authenticated-orcid":false,"given":"Benedikt","family":"Gierlichs","sequence":"additional","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0879-076X","authenticated-orcid":false,"given":"Ingrid","family":"Verbauwhede","sequence":"additional","affiliation":[]}],"member":"297","published-online":{"date-parts":[[2024,2,23]]},"reference":[{"key":"2_CR1","unstructured":"Bar-El, H., Choukri, H., Naccache, D., Tunstall, M., Whelan, C.: The sorcerer\u2019s apprentice guide to fault attacks. Cryptology ePrint Archive, Paper 2004\/100 (2004). https:\/\/eprint.iacr.org\/2004\/100"},{"issue":"11","key":"2_CR2","doi-asserted-by":"publisher","first-page":"3056","DOI":"10.1109\/JPROC.2012.2188769","volume":"100","author":"A Barenghi","year":"2012","unstructured":"Barenghi, A., Breveglieri, L., Koren, I., Naccache, D.: Fault injection attacks on cryptographic devices: theory, practice, and countermeasures. Proc. IEEE 100(11), 3056\u20133076 (2012). https:\/\/doi.org\/10.1109\/JPROC.2012.2188769","journal-title":"Proc. IEEE"},{"key":"2_CR3","doi-asserted-by":"publisher","unstructured":"Barker, E., Dang, Q.: NIST Special Publication 800-57 Part 3 Revision 1: Recommendation for Key Management: Application-Specific Key Management Guidance. National Institute of Standards and Technology (2015). https:\/\/doi.org\/10.6028\/NIST.SP.800-57pt3r1. http:\/\/nvlpubs.nist.gov\/nistpubs\/SpecialPublications\/NIST.SP.800-57Pt3r1.pdf","DOI":"10.6028\/NIST.SP.800-57pt3r1"},{"key":"2_CR4","doi-asserted-by":"publisher","unstructured":"Bl\u00f6mer, J., da Silva, R.G., G\u00fcnther, P., Kr\u00e4mer, J., Seifert, J.-P.: A practical second-order fault attack against a real-world pairing implementation. In: 2014 Workshop on Fault Diagnosis and Tolerance in Cryptography, pp. 123\u2013136 (2014). https:\/\/doi.org\/10.1109\/FDTC.2014.22","DOI":"10.1109\/FDTC.2014.22"},{"key":"2_CR5","unstructured":"Copetti, R.: Nintendo 3DS architecture - a practical analysis (2023). https:\/\/archive.li\/cGFtC. https:\/\/www.copetti.org\/writings\/consoles\/nintendo-3ds\/#anti-piracy-and-homebrew. Accessed 28 Sept 2023"},{"key":"2_CR6","unstructured":"Copetti, R.: Nintendo DS architecture - a practical analysis (2020). https:\/\/archive.ph\/28Jmb. https:\/\/www.copetti.org\/writings\/consoles\/nintendo-ds\/%5C#security-mechanisms. Accessed 27 Mar 2022"},{"key":"2_CR7","unstructured":"dark samus, Worklog - Getting the DSi bootroms - BitBuilt, Online forum (2017). https:\/\/archive.ph\/AvDsQ. https:\/\/bitbuilt.net\/forums\/index.php?threads\/.948\/. Accessed 27 Mar 2022"},{"key":"2_CR8","unstructured":"derrek, nedwill, naehrwert, Nintendo hacking 2016: game over. In: 33rd Chaos Communications Congress: \u2018Works for Me\u2019 (2016). https:\/\/media.ccc.de\/v\/33c3-8344-nintendo_hacking_2016. Accessed 27 Mar 2022"},{"key":"2_CR9","unstructured":"Dusart, P., Letourneux, G., Vivolo, O.: Differential fault analysis on A.E.S. Cryptology ePrint Archive, Paper 2003\/010 (2003). https:\/\/eprint.iacr.org\/2003\/010"},{"key":"2_CR10","unstructured":"fail0verflow, PS4 Aux Hax 2: Syscon (2018). https:\/\/archive.ph\/mt3YK. https:\/\/fail0verflow.com\/blog\/2018\/ps4-syscon\/. Accessed 09 Oct 2022"},{"key":"2_CR11","unstructured":"Galauner, A., Bazanski, S.: Glitching the switch. In: OpenChaos 2018 (2018). https:\/\/media.ccc.de\/v\/c4.openchaos.2018.06.glitching-the-switch. Accessed 05 Oct 2022"},{"key":"2_CR12","doi-asserted-by":"publisher","unstructured":"Gerlinsky, C.: Breaking code read protection on the NXP LPC-family microcontrollers. In: REcon 2017 Brussels Hacking Conference (2017). https:\/\/doi.org\/10.5446\/32392","DOI":"10.5446\/32392"},{"key":"2_CR13","doi-asserted-by":"crossref","unstructured":"den Herrewegen, J.V., Oswald, D., Garcia, F.D., Temeiza, Q.: Fill your boots: enhanced embedded bootloader exploits via fault injection and binary analysis. IACR Trans. Cryptogr. Hardw. Embed. Syst. 2021(1), 56\u201381 (2020). https:\/\/doi.org\/10.46586\/tches.v2021.i1.56-81. https:\/\/tches.iacr.org\/index.php\/TCHES\/article\/view\/8727","DOI":"10.46586\/tches.v2021.i1.56-81"},{"key":"2_CR14","unstructured":"Korth, M.: GBATEK (2021). https:\/\/archive.ph\/Ws1cO. https:\/\/problemkaputt.de\/gbatek.htm. Accessed 04 Oct 2022"},{"key":"2_CR15","unstructured":"Korth, M.: GBATEK DSi Control Registers (SCFG) (2021). https:\/\/archive.ph\/rPwKB. https:\/\/problemkaputt.de\/gbatek-dsi-control-registersscfg.htm. Accessed 04 Oct 2022"},{"key":"2_CR16","unstructured":"Korth, M.: GBATEK DSi SD\/MMC Internal NAND layout, See \u2018boot info blocks\u2019 (2021). https:\/\/archive.li\/I7S9E. https:\/\/problemkaputt.de\/gbatek-dsi-sd-mmc-internal-nand-layout.htm. Accessed 27 Mar 2022"},{"key":"2_CR17","unstructured":"Korth, M.: Unlaunch (2018). https:\/\/archive.ph\/g5Qv0. https:\/\/problemkaputt.de\/unlaunch.htm. Accessed 27 Mar 2022"},{"key":"2_CR18","doi-asserted-by":"publisher","unstructured":"Lu, Y.: Attacking hardware AES with DFA (2019). https:\/\/doi.org\/10.48550\/ARXIV.1902.08693. https:\/\/arxiv.org\/abs\/1902.08693. Supplementary text available at https:\/\/yifan.lu\/2019\/02\/22\/attacking-hardware-aes-withdfa\/. https:\/\/archive.ph\/oQlE7. Accessed 06 Oct 2022","DOI":"10.48550\/ARXIV.1902.08693"},{"key":"2_CR19","doi-asserted-by":"publisher","unstructured":"Lu, Y.: Injecting software vulnerabilities with voltage glitching (2019). https:\/\/doi.org\/10.48550\/ARXIV.1903.08102. https:\/\/arxiv.org\/abs\/1903.08102","DOI":"10.48550\/ARXIV.1903.08102"},{"key":"2_CR20","doi-asserted-by":"publisher","unstructured":"McClintic, M., Maloney, D., Scires, M., Marcano, G., Norman, M., Wright, A.: Keyshuffling attack for persistent early code execution in the Nintendo 3DS secure bootchain (2018). https:\/\/doi.org\/10.48550\/ARXIV.1802.00092. https:\/\/arxiv.org\/abs\/1802.00092","DOI":"10.48550\/ARXIV.1802.00092"},{"key":"2_CR21","doi-asserted-by":"publisher","unstructured":"Moro, N., Dehbaoui, A., Heydemann, K., Robisson, B., Encrenaz, E.: Electromagnetic fault injection: towards a fault model on a 32-bit microcontroller (2013). https:\/\/doi.org\/10.1109\/FDTC.2013.9. http:\/\/arxiv.org\/abs\/1402.6421","DOI":"10.1109\/FDTC.2013.9"},{"key":"2_CR22","unstructured":"National Institute of Standards and Technology, NIST Retires SHA-1 Cryptographic Algorithm (2022). https:\/\/archive.ph\/zUJQk. https:\/\/www.nist.gov\/news-events\/news\/2022\/12\/nist-retires-sha-1-cryptographicalgorithm. Accessed 27 Apr 2023"},{"key":"2_CR23","unstructured":"nocash, ApacheThunder, dark samus, Get BOOTROM\/Key Scrambler? - 4dsdev, Online forum (2016). https:\/\/4dsdev.kuribo64.net\/thread.php?id=130. https:\/\/archive.ph\/qdu9x. Accessed 27 Mar 2022"},{"key":"2_CR24","unstructured":"oranav, eMMC hacking, or: how I fixed long-dead Galaxy S3 phones. In: 34th Chaos Communications Congress: \u2018tuwat\u2019 (2017). https:\/\/media.ccc.de\/v\/34c3-8784-emmc_hacking_or_how_i_fixed_long-dead_galaxy_s3_phones. Accessed 24 Feb 2023"},{"key":"2_CR25","doi-asserted-by":"publisher","unstructured":"Ordas, S., Guillaume-Sage, L., Maurine, P.: Electromagnetic fault injection: the curse of flip-flops. J. Cryptogr. Eng. 7(3), 183\u2013197 (2017). https:\/\/doi.org\/10.1007\/s13389-016-0128-3. https:\/\/hal-lirmm.ccsd.cnrs.fr\/lirmm-01430913","DOI":"10.1007\/s13389-016-0128-3"},{"key":"2_CR26","unstructured":"plutoo, derrek, smea, console hacking: breaking the 3DS. In: 32nd Chaos Communications Congress: \u2018Gated Communities\u2019 (2015). https:\/\/media.ccc.de\/v\/32c3-7240-console_hacking. Accessed 04 Oct 2022"},{"key":"2_CR27","unstructured":"Purdy, K.: Appliance makers sad that 50% of customers won\u2019t connect smart appliances. Ars Technica (2023). https:\/\/arstechnica.com\/gadgets\/2023\/01\/halfof-smart-appliances-remain-disconnected-from-internet-makers-lament\/. Accessed 17 May 2023"},{"key":"2_CR28","unstructured":"Raelize, Espressif ESP32: Controlling PC during Secure Boot (2020). https:\/\/archive.li\/6vEgT. https:\/\/raelize.com\/blog\/espressif-systemsesp32-controlling-pc-during-sb\/. Accessed 09 Oct 2022"},{"key":"2_CR29","doi-asserted-by":"publisher","unstructured":"Ren, J., Dubois, D.J., Choffnes, D., Mandalari, A.M., Kolcun, R., Haddadi, H.: Information exposure from consumer IoT devices: a multidimensional, network-informed measurement approach. In: Proceedings of the Internet Measurement Conference. IMC 2019, pp. 267\u2013279. Association for Computing Machinery, Amsterdam (2019). https:\/\/doi.org\/10.1145\/3355369.3355577","DOI":"10.1145\/3355369.3355577"},{"key":"2_CR30","doi-asserted-by":"publisher","unstructured":"Scire, M., Mears, M., Maloney, D., Norman, M., Tux, S., Monroe, P.: Attacking the nintendo 3DS boot ROMs (2018). https:\/\/arxiv.org\/abs\/1802.00359. https:\/\/doi.org\/10.48550\/ARXIV.1802.00359","DOI":"10.48550\/ARXIV.1802.00359"},{"key":"2_CR31","unstructured":"SciresM, Myria, Normmatt, TuxSH, Hedgeberg, Sighax and Boot9strap (2017). https:\/\/web.archive.org\/web\/20211105063611\/. https:\/\/sciresm.github.io\/33-and-a-half-c3\/. Accessed 27 Mar 2022"},{"key":"2_CR32","unstructured":"Scott, M.E.: DSi RAM tracing (2009). https:\/\/archive.ph\/lhMYa. https:\/\/scanlime.org\/2009\/09\/dsi-ram-tracing\/. Accessed 27 June 2023"},{"key":"2_CR33","unstructured":"Shacham, H., Buchanan, E., Roemer, R., Savage, S.: Return-oriented programming: exploits without code injection. Black Hat USA 2008 Briefings (2008)"},{"key":"2_CR34","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102471","volume":"111","author":"C Shepherd","year":"2021","unstructured":"Shepherd, C., et al.: Physical fault injection and side-channel attacks on mobile devices: a comprehensive analysis. Comput. Secur. 111, 102471 (2021). https:\/\/doi.org\/10.1016\/j.cose.2021.102471","journal-title":"Comput. Secur."},{"key":"2_CR35","unstructured":"Sidorenko, A., van den Berg, J., Foekema, R., Grashuis, M., de Vos, J.: Bellcore attack in practice. Cryptology ePrint Archive, Paper 2012\/553 (2012). https:\/\/eprint.iacr.org\/2012\/553"},{"key":"2_CR36","doi-asserted-by":"publisher","first-page":"570","DOI":"10.1007\/978-3-319-63688-7_19","volume-title":"Advances in Cryptology - CRYPTO 2017","author":"M Stevens","year":"2017","unstructured":"Stevens, M., Bursztein, E., Karpman, P., Albertini, A., Markov, Y.: The first collision for full SHA-1. In: Katz, J., Shacham, H. (eds.) CRYPTO 2017. LNCS, vol. 10401, pp. 570\u2013596. Springer, Cham (2017). https:\/\/doi.org\/10.1007\/978-3-319-63688-7_19"},{"key":"2_CR37","doi-asserted-by":"crossref","unstructured":"Timmers, N., Mune, C.: Escalating privileges in Linux using voltage fault injection. In: 2017 Workshop on Fault Diagnosis and Tolerance in Cryptography (FDTC) (2017)","DOI":"10.1109\/FDTC.2017.16"},{"key":"2_CR38","doi-asserted-by":"publisher","first-page":"225","DOI":"10.1007\/978-3-540-73489-5_12","volume-title":"Pairing-Based Cryptography","author":"C Whelan","year":"2007","unstructured":"Whelan, C., Scott, M.: The importance of the final exponentiation in pairings when considering fault attacks. In: Takagi, T., Okamoto, E., Okamoto, T., Okamoto, T. (eds.) Pairing 2007. LNCS, vol. 4575, pp. 225\u2013246. Springer, Heidelberg (2007). https:\/\/doi.org\/10.1007\/978-3-540-73489-5_12"},{"key":"2_CR39","unstructured":"Wololo, Picofly: The \\$3 Nintendo Switch hacking modchip is real, and it\u2019s now available (2023). https:\/\/archive.li\/Puo2C. https:\/\/wololo.net\/2023\/03\/21\/picofly-the-3-nintendo-switch-hacking-modchip-is-realand-its-now-available\/. Accessed 17 Apr 2023"},{"key":"2_CR40","unstructured":"Wouters, L.: Glitched on earth by humans: a black-box security evaluation of the SpaceX starlink user terminal. In: DEF CON 2022 (2022)"},{"key":"2_CR41","unstructured":"Yuce, B., Schaumont, P., Witteman, M.: Fault attacks on secure embedded software: threats, design and evaluation. CoRR abs\/2003.10513 (2020). arXiv: 2003.10513. https:\/\/arxiv.org\/abs\/2003.10513"}],"container-title":["Lecture Notes in Computer Science","Smart Card Research and Advanced Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-54409-5_2","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,31]],"date-time":"2024-03-31T12:01:36Z","timestamp":1711886496000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-54409-5_2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"ISBN":["9783031544088","9783031544095"],"references-count":41,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-54409-5_2","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2024]]},"assertion":[{"value":"23 February 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"CARDIS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Smart Card Research and Advanced Applications","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Amsterdam","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"The Netherlands","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2023","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"14 November 2023","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"16 November 2023","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"22","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"cardis2023","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Easy Chair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"28","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"13","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"46% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}