Protect the product
Evaluate Ledger devices and software before weaknesses can affect users.
Inside the Donjon
The security research team at Ledger, working across software, hardware, and cryptography.
We make Ledger products harder to break.
The Donjon's core mission is to improve the security of Ledger products through hands-on, attacker-minded research.
We also contribute to the wider security ecosystem and undertake selected external security audits and consultancy.
Strengthen the ecosystem
Apply our research beyond Ledger when it can improve security across the industry.
Share what helps
Publish research and release attack tooling that moves the security community forward.
From source code to silicon.
Product security crosses boundaries. Our work combines disciplines so an issue cannot hide in the gap between software, electronics, and cryptography.
Software Security
We study firmware and applications from source code to machine code, looking for the paths an attacker would take.
- Firmware analysis
- Reverse engineering
- Vulnerability research
Hardware Security
We evaluate devices at the physical layer, where implementation details become observable and exploitable.
- Side-channel analysis
- Fault injection
- Chip-level assessment
Cryptography
We assess protocols and implementations to make sure strong primitives remain strong in real products.
- Protocol analysis
- Implementation review
- Algorithm assessment
Tools should travel further than the lab.
We release much of our internal attack tooling so other researchers can reproduce, improve, and build on our work.
Pull requests are welcome.