Pinned post
Donjon is the Security Research team at @Ledger. Follow us to get the the latest news from our research.
More info on our blog: ledger-donjon.github.io
More info on our blog: ledger-donjon.github.io
Ledger Donjon
Verified account This account is verified. Learn more@DonjonLedger
The security research at Ledger.
1 Following 8.7K Followers 202 Posts
Latest posts 5
We regularly communicate about the results we achieve. But sometimes, the journey matters just as much as the result.
We recently managed to bypass the RP2350-A4 debug protection using an innovative approach combining two techniques: photon emission imaging and laser fault injection.
Here our technical blogpost: donjon.ledger.com/blog/rp2350-se…
A big thank you to @Raspberry_Pi for the collaboration and for highlighting this work.
💥
We recently managed to bypass the RP2350-A4 debug protection using an innovative approach combining two techniques: photon emission imaging and laser fault injection.
Here our technical blogpost: donjon.ledger.com/blog/rp2350-se…
A big thank you to @Raspberry_Pi for the collaboration and for highlighting this work.
💥
donjon.ledger.com Photon-Emission-Guided Laser Fault Injection Enables RP2350 Secure Debug | Ledger Donjon Differential photon-emission microscopy localized debug enable register activity and narrowed the laser search before SWD-guided injection set the two bits required to restore Secure debug on an... Lasers. Microscopes. $250K. One secured chip.View quoted post on X
Ledger Donjon just showed how they cracked debug access on RP2350-A4, a break worthy of Raspberry Pi's own Hacking Challenge.
Respin or no respin? Raspberry Pi says no. Read why: raspberrypi.com/news/everythin…
We’re releasing an open EM side-channel dataset for ML-KEM (Kyber) 🔓
• 200k traces × 3 implementations (ref, pqm4, masked mkm4)
• Windowed on the pair-pointwise polynomial multiplication
• Per-share traces for 2nd-order analysis
• STM32F407 Cortex-M4, NumPy format
Lowering the barrier to PQC side-channel research.
We’ll be presenting the work at OPTIMIST, a CHES 2026 workshop, come and discuss it with us in Antalya!
📜 Paper: eprint.iacr.org/2026/1851
📅 OPTIMIST: optimist-ose.org/ches26
• 200k traces × 3 implementations (ref, pqm4, masked mkm4)
• Windowed on the pair-pointwise polynomial multiplication
• Per-share traces for 2nd-order analysis
• STM32F407 Cortex-M4, NumPy format
Lowering the barrier to PQC side-channel research.
We’ll be presenting the work at OPTIMIST, a CHES 2026 workshop, come and discuss it with us in Antalya!
📜 Paper: eprint.iacr.org/2026/1851
📅 OPTIMIST: optimist-ose.org/ches26
Our applied PQC series continues.
This time, @k15ab_ and @6c656e69 attack masked Kyber768.
Masking defeats first-order SCA. But with a centered cross-product and the right covariance model, a second-order CPA recovers the secret coefficient.
donjon.ledger.com/blog/second-or…
This time, @k15ab_ and @6c656e69 attack masked Kyber768.
Masking defeats first-order SCA. But with a centered cross-product and the right covariance model, a second-order CPA recovers the secret coefficient.
donjon.ledger.com/blog/second-or…
donjon.ledger.com A Second-Order Side-Channel Attack on Masked Kyber768 | Ledger Donjon Part 3 of our series on side-channel attacks against post-quantum cryptography: masking defeats the first-order attack, but masked Kyber768 still falls to a second-order CPA.