0
\$\begingroup\$

This is from the Wikipedia entry on Pirate decryption

The signals moving between the smartcard and the receiver can be easily intercepted and analyzed. They can be vulnerable to a "glitch" by which the incoming power and clock signals are disrupted for a short and carefully timed length of time (such as a millionth of a second) in order to cause the processor to skip an instruction. In many cases, off-the-shelf hardware with modified firmware designed to exploit this weakness was sold to pirates for use in tampering with cards for the US-based DirecTV system.

\$\endgroup\$
2
  • 1
    \$\begingroup\$ It is possible it caused the program counter to double (or some other value) increment, thereby missing the address of an instruction. en.wikipedia.org/wiki/Program_counter \$\endgroup\$ Apr 15, 2016 at 16:17
  • \$\begingroup\$ Actually it is not a "delay" per se but a glitch, i.e. some carefully timed and calibrated transition(s) in the power lines that propagate to the internal logic, as described by @laptop2d. \$\endgroup\$
    – user59864
    Jul 25, 2017 at 18:19

1 Answer 1

2
\$\begingroup\$

Short answer: a program running on a processor can be manipulated by introducing a glitch in the power supply. Processors are made up of transistors, each instruction has transistors dedicated to it. If you are familiar with assembly there are instructions to add, subtract, multiply, store/load and instructions to control program flow, like jump and compare. The hackers are analyzing a program on a processor, at a certain point in the program (maybe they want it to jump to a different instruction, or add some numbers together wrong) they introduce a glitch in the power supply\clock to change the state of the transistors and cause an intentional error in the program to change the way the program runs on the processor. You would have to do a lot of experimentation to get this to work right.

\$\endgroup\$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.