Donjon Tools Suite

The Security Team at Ledger develops and open-sources their research and assessment tools.

Overview

Explore our open-source tools for hardware and software security research, or browse the complete collection in the Ledger Donjon GitHub organization .

Hardware attack & analysis tools

Boards, control software, and analysis utilities built for side-channel and fault injection research.

Boards

Scaffold

Scaffold

Multi-purpose board to control devices with embedded features such as: current consumption measurement, multiple communication protocols (SPI, I²C, UART...), command triggering, pulse generators...

Curmea

Curmea

Simple board for differential current consumption measurement.

Silicon Toaster

Silicon Toaster

Board to inject electromagnetic pulses from a bank of capacitors, that can be loaded to a programmable level of voltage, and discharged with a triggering input source.

Shutter Controller

Shutter Controller

A low-cost motorized add-on of optical tower on ALPhANOV's Laser Microscope Station to control a mechanical shutter.

Software and Utilities

Useful utilities while performing hardware attacks.

Laser Studio

Multi-environment python3 software controlling hardware benches to conduct automatized evaluations.

Turboplot

Turboplot

A blazingly fast waveform renderer made for visualizing huge traces.

pystages

pystages

Python module for managing the positions of physical actuators, such as CNCs, Corvus, or Newport. Also provides a simple User Interface to make easy and quick moves of actuators.

pyPDM

This python module can control the Pulse-on-Demand Modules from ALPhANOV.

Quicklog

Python module for creating log files during a fault injection campaign. It can link each entry to curve as binary data, for instance retrieved from an oscilloscope.

Quicklog Explorer

GUI utility for viewing, filtering and plotting generated with Quicklog.

Rainbow

Makes Unicorn traces. Generic Side-Channel and Fault Injection simulator.

Visplot

Visplot

A side-channel traces visualizer based on vispy.

Side-channel Tools

Muscat

Side-channel analysis tool written in Rust for performance optimizations.

Scadl

Side-channel analysis tool with Deep-Learning features.

Lascar

Our legacy side-channel python3 library.

Software attack & analysis tools

Utilities for program analysis and verifying security properties in compiled software.

Zorya

Automated concolic execution engine optimized for Go binaries analysis, using Ghidra's P-Code as IR, and written in Rust.

cargo-checkct

Written in Rust, it verifies formally if a software is compiled down to constant-time machine code.