Articles and security research from the Ledger Donjon team.
Research notes, attack techniques, and technical findings from the Ledger Donjon team, published here and on the Ledger corporate blog.
Browse recent Donjon work or subscribe to receive new on-site publications through RSS.
Differential photon-emission microscopy localized debug enable register activity and narrowed the laser search before SWD-guided injection set the two bits required to restore Secure debug on an RP2350 A4.
After uncovering a genuine check bypass on the Tangem Android application and a brute-force attack on the card's authentication protocol, the Ledger Donjon turned its attention to the card itself with more advanced tools and sophisticated techniques. What we found is a critical vulnerability that lets an attacker with physical access to a single Tangem card reset its password and steal all associated funds.
Part 3 of our series on side-channel attacks against post-quantum cryptography: masking defeats the first-order attack, but masked Kyber768 still falls to a second-order CPA.
The Ledger Donjon's journey from AI-assisted development to an AI security harness, and why offense is no longer only the best defense, but a required security capability.
Part 2 of our series on side-channel attacks against post-quantum cryptography: we break the CRYSTALS ML-KEM reference implementation with a non-profiled deep learning attack — no clone device, no leakage model.
We used laser fault injection to bypass Ed25519 signature verification on the TROPIC01 open-source secure element, achieving arbitrary firmware execution.
The Hidden Risk of Side-Channel Attacks on Post Quantum Cryptogra...
Quantum Computing’s Threat to Blockchain: The Enduring Need...
Enforcing BIP32 Hardened Derivation Prefixes for Enhanced Securit...
Smartphones are commonly lost or stolen, but could that impact your security? The Ledger Donjon targeted a recent SoC to find out exactly how secure today’s smartphones are.
The Vulnerability Exposing Tangem Cards to Brute-Force Attacks...
Tangem Genuine Check Bypass on Android Application
Why Secure Elements make a crucial difference to Hardware Wallet ...
TEE: When “Trusted” Doesn’t Mean “Secure&...
SCADL: A new side-channel attack tool using deep learning...
Argo CD Security Misconfiguration Adventures
Cargo-checkct: our home-made tool guarding against timing attacks...
Funds of Every Wallet Created With The Trust Wallet Browser Exten...
Firmware Extraction: Evil-Maid Attacks on Blockstream Jade Hardwa...
Prepping for Pwn2Own 2022
App Streaming: a New Development Paradigm for Environments with C...
New PIN screen on Ledger Nano products
Integrating fault injection in development workflows...
Mounting a low-cost laser bench
Black-box attacks on white-box ECDSA
Donjon CTF 2021: Capture the Fortress!
On the security of Booba’s music video and NFTs...
Remote laser faults injection during pandemic
Protecting SSH keys with TPM 2.0, now available on Debian...
On the security model of software wallets
Kaspersky Password Manager: All your passwords belong to us...
A Compact Electromagnetic Fault Injection Setup
The Making of picoHSM Challenge
Discovering SMPC through CTF Challenges
Exploiting Smart Contracts in CTF Challenges
Ghostbuster: Spectre exploitation in real life
CTF 2020: Capture the Fortress
Follow-up on PIN verification against side-channel attack: KeepKe...
Lit by Laser: PIN Code Recovery on Coldcard Mk2 Wallets...
Ledger’s CTF 2018 and side-channels
Everybody be Cool, This is a Robbery!
OLED screen (minor) vulnerability
Unfixable Seed Extraction on Trezor – A practical and relia...
Extracting seed from Ellipal wallet
Breaking Trezor One with Side Channel Attacks
Extracting seeds from Wallets
Lascar: Donjon Side Channel Library
Rainbow
Introducing Ledger Donjon