Add table and pics to HSM chapter

This commit is contained in:
jaseg 2025-10-29 15:36:59 +01:00
parent 3d66deb9ba
commit dab9ed1eff
38 changed files with 1076 additions and 528 deletions

View file

@ -26,3 +26,4 @@ rights, today human rights are under attack both from within and from the outsid
Publishing IHSM technology as open source, we hope to provide one building block for new computing systems accessible to
all that are resilient and secure in the face of growing adversity.
\todo{Go into future applications?}

View file

@ -9,7 +9,8 @@
\chaptertitle{The German ePA: A Motivating Counter-Example}
\todo{FIXME: Proper citation here}
\sourceattrib{This part is based on a short paper presented at the HS3 workshop at ESORICS 2025.}
\sourceattrib{This part is based on a short paper written by me and presented by me at the HS3 workshop at ESORICS
2025.}
Looking at the landscape of computer security solutions, we are presented with a wide variety of vendors and products
that may give the impression that hardware security is a solved problem. Vendors sell various claims rangning from
\emph{You don't need hardware security, just do it in the cloud!} to \emph{Buy our HSM and you will be secure!}. In

View file

@ -145,7 +145,7 @@ outside-facing wall to detect attempts at drilling into it. Finally, we have fou
mid-2000s era slot machines in Germany that includes a tamper-sensing mesh, presumably to prevent modification or
cloning. This device will also be analyzed later in this chapter.
\section{The Principles of Tamper-Sensing Mesh Construction and Monitoring}
\section{Tamper-Sensing Mesh Design Principles}
%\subsection{Tamper-sensing Mesh Manufacturing}
@ -176,7 +176,7 @@ basic construction and layout has not changed much since the early 1990ies~\cite
macphersonImprovementsSecurityEnclosures1993,
macphersonTamperRespondentEnclosure1999}.
\subsection{Tamper-sensing Mesh Monitoring}
\subsection{Monitoring Circuit Approaches}
Tamper-sensing meshes are most effective when they are continuously monitored using a backup power supply when the
larger system is powered off. In practice, the main challenge with continuous monitoring of tamper-sensing meshes is in
@ -230,7 +230,90 @@ meshes.
Given their niche applications and high cost, devices incorporating tamper sensing meshes tend to be hard to find. For
this survey, we chose 21 different models of card payment terminals, and 6 other devices. All devices were procured from
ebay, and the majority were sold by electronic waste recycling companies.
ebay, and the majority were sold by electronic waste recycling companies. A complete list of our samples can be found in
Table~\ref{tab_hsm_survey_sample_list}. Photos of each device are shown in Figure~\ref{fig_hsm_survey_sample_pics}.
\begin{table}
\footnotesize
\rowcolors{2}{gray!15}{white}
\begin{tabular}[c]{c>{\RaggedRight\arraybackslash}p{35mm}>{\RaggedRight\arraybackslash}p{30mm}llc}
\textbf{ID} & \textbf{Device} & \textbf{Manufacturer} & \textbf{Type code} & \textbf{Year} \\
\hline
H01 & PED & Verifone & VX 570 & ca. 2010 \\
H02 & Slot machine CPU & Merkur / ADP Gauselmann & Sam 12 EC2 & ca. 2012 \\
H03 & EPP & Sagem & USA1315-4240 R1A & 2014 \\
H04 & EPP & Sagem & USA1316-5120 R1A & 2007 \\
H05 & PED & Xac & xAPT-103 & 2014 \\
H06 & PED & Ingenico & iCT250-11T1860A & 2016-17 \\
H08 & PED & Sagem & NOR4100-4220 R1A & 2012 \\
H09 & PED & Hypercom & M4230 & 2010 \\
H10 & PED & Worldline & YOMANI XR & 2016 \\
H11 & PED & Banksys & C-ZAM Smash Portable & 2004 \\
H12 & PED & Hypercom & Optimum P2100 & 2010 \\
H13 & PED & Ingenico & iCT 220-11T2938A & 2016 \\
H14 & PED & Verifone & H5000 & 2016 \\
H15 & PED & Verifone & MX 925 & 2018 \\
H16 & PED & Verifone & V200c CTLS & 2021 \\
H17 & PED & Verifone & VX 680 & 2014 \\
H18 & PED & Ingenico & i7910 & 2010 \\
H19 & PED & Banksys & XENTA & 2004-2011 \\
H20 & PED & Verifone & VX 520 3G & 2017 \\
H21 & PED & Verifone & V400m Plus 4G & 2018 \\
H22 & PED & Ingenico & Move 3500 & 2020 \\
H23 & PED & Ingenico & iPP 350-11T1718A & 2015 \\
H24 & PED & Ingenico & iWL255-01T2117A & 2016 \\
H25 & Franking Machine & Neopost & IJ-25 & ca. 2001 \\
H27 & PED & Sumup & AIR1E205 & 2021 \\
H28 & EPP & NCR & 5814 UEPP & 2019 \\
H29 & HSM & SafeNet & VBD-05 & 2018 \\
H30 & HSM & Irdeto & Mayflower-IDX/C201 & 2011 \\
\end{tabular}
\label{tab_hsm_survey_sample_list}
\caption{The samples we dissected in our survey.}
\end{table}
\newcommand{\surveypic}[2]{
\begingroup
\setlength{\fboxsep}{0.2mm}
\begin{overpic}[percent,width=25mm]{#2}
\put(100,85){\makebox[0pt][r]{\colorbox{white}{\large H#1}}}
\end{overpic}
\endgroup
}
\begin{figure}
\begin{tabular}[c]{cccc}
\surveypic{02}{survey_diag_S02.jpg}&
\surveypic{03}{survey_diag_S03.jpg}&
\surveypic{04}{survey_diag_S04.jpg}&
\surveypic{05}{survey_diag_S05.jpg}\\
\surveypic{06}{survey_diag_S06.jpg}&
\surveypic{08}{survey_diag_S08.jpg}&
\surveypic{09}{survey_diag_S09.jpg}&
\surveypic{10}{survey_diag_S10.jpg}\\
\surveypic{11}{survey_diag_S11.jpg}&
\surveypic{12}{survey_diag_S12.jpg}&
\surveypic{13}{survey_diag_S13.jpg}&
\surveypic{14}{survey_diag_S14.jpg}\\
\surveypic{15}{survey_diag_S15.jpg}&
\surveypic{16}{survey_diag_S16.jpg}&
\surveypic{17}{survey_diag_S17.jpg}&
\surveypic{18}{survey_diag_S18.jpg}\\
\surveypic{19}{survey_diag_S19.jpg}&
\surveypic{20}{survey_diag_S20.jpg}&
\surveypic{21}{survey_diag_S21.jpg}&
\surveypic{22}{survey_diag_S22.jpg}\\
\surveypic{23}{survey_diag_S23.jpg}&
\surveypic{24}{survey_diag_S24.jpg}&
\surveypic{25}{survey_diag_S25.jpg}&
\surveypic{27}{survey_diag_S27.jpg}\\
\surveypic{28}{survey_diag_S28.jpg}&
\surveypic{29}{survey_diag_S29.jpg}&
\surveypic{30}{survey_diag_S30.jpg}&
\end{tabular}
\label{fig_hsm_survey_sample_pics}
\caption{Photos of all survey samples}
\end{figure}
\subsubsection{Card Payment Terminals}

Binary file not shown.

After

Width:  |  Height:  |  Size: 421 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 399 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 400 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 364 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 398 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 362 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 358 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 403 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 372 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 370 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 378 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 376 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 370 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 369 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 362 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 364 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 393 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 321 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 370 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 379 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 386 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 375 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 369 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 281 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 412 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 333 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 425 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 393 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 405 KiB

View file

@ -7,6 +7,8 @@
\section{Introduction}
\sourceattrib{This part is adapted from a paper written by me and presented by me at CHES
2022~\cite{gotteCantTouchThis2022}.}
While information security technology has matured a great deal in the last half-century, physical security did not keep
up with the pace of the remainder of this industry. Given the right skills, physical access to a computer still often
allows full compromise. The physical security of modern server hardware hinges on what lock you put on the room it is

View file

@ -1,7 +1,13 @@
%\chapterquote{Attributed to Tom Milligan~\cite{peaseTroubleshootingAnalogCircuits1993}}{When you are taking data, if you see something funny, Record Amount of Funny.}
\chapterquote{Stewart Brand~\cite{internetarchiveWholeEarthCatalog1969}}{We are as gods and might as well get good at
it.}
\chaptertitle{High Fidelity Security Mesh Monitoring using Low-Cost, Embedded Time Domain Reflectometry}
\section{Introduction}
\sourceattrib{This part is adapted from a paper written by me that will be presented by me at CHES
2026.}
\todo{FIXME: Proper citation in source attribution}
Security meshes continue to be the state of the art for tamper sensing in applications where sophisticated physical
attacks such as attempts at drilling or sawing through the device's enclosure to place probes must be prevented. Common
applications for such meshes include Hardware Security Modules (HSMs) used to store and process cryptographic keys

View file

@ -173,3 +173,8 @@
\hyphenation{Si-cher-heits-mo-du-le}
\setstretch{1.3}
% Settings for tocloft as applied to minitoc
%\setlength{\cftbeforesecskip}{-1pt}
%\setlength{\cftbeforesubsecskip}{-1pt}

View file

@ -33,10 +33,17 @@
\usepackage{pdfpages}
\usepackage{etoolbox}
\usepackage{catchfile}
\usepackage{colortbl}
\usepackage{rotating}
\usepackage{placeins}
\usepackage{minted} % pygmentized source code
\usepackage{overpic}
\usepackage{adjustbox}
% FOr table formatting
\usepackage{ragged2e}
\usepackage{array}
\usepackage{longtable}
\usepackage{colortbl}
% pygmentized source code
\usepackage{minted}
%\usepackage[pdftex]{graphicx,color}
%\usepackage{showframe} % Useful for page layout debugging
\usepackage{csquotes}

1467
main.bib

File diff suppressed because it is too large Load diff

View file

@ -8,7 +8,9 @@
\newcommand{\chaptertitle}[1]{
\chapter{#1}
\printchapterquote
\minitoc
\begin{spacing}{1.1}
\minitoc
\end{spacing}
\newpage
}
@ -34,16 +36,16 @@
\listoftables
\mainmatter
\dochapter{chapter-introduction} % Status: In pretty good shape
\dochapter{chapter-epa} % Status: In pretty good shape
\dochapter{chapter-ihsm} % Status: Copy-paste done, build works, integration TODO
%\dochapter{chapter-introduction} % Status: In pretty good shape
%\dochapter{chapter-epa} % Status: In pretty good shape
\dochapter{chapter-hsms} % Status: In pretty good shape
\dochapter{chapter-sampling-mesh-monitor} % Status: Copy-paste done, build works, integration TODO
\dochapter{chapter-nice-coils} % Status: Copy-paste done, build works, integration TODO
\dochapter{chapter-qkd} % Status: Re-integration of changes from workshop paper TODO
\dochapter{chapter-smpc} % Status: TODO
%\dochapter{chapter-ihsm} % Status: Copy-paste done, build works, integration TODO
%\dochapter{chapter-sampling-mesh-monitor} % Status: Copy-paste done, build works, integration TODO
%\dochapter{chapter-nice-coils} % Status: Copy-paste done, build works, integration TODO
%\dochapter{chapter-qkd} % Status: Re-integration of changes from workshop paper done
%\dochapter{chapter-smpc} % Status: TODO
\input{chapter-conclusion/chapter.tex} % Status: TODO
\input{chapter-conclusion/chapter.tex} % Status: draft done
\appendix