Paper 2026/2475

Tamper Sensing Meshes in Payment Terminals and Beyond

Jan Sebastian Götte, TU Darmstadt, Yasec
Björn Scheuermann, TU Darmstadt
Abstract

Card Payment Terminals commonly use tamper sensing meshes to deter physical attacks on devices handling sensitive data such as cryptographic keys. Although their use of such meshes is frequently referenced in research literature, the public record contains little research on their construction. Addressing this gap, in this paper we present the first comprehensive analysis of the practical implementation of tamper sensing meshes across a wide range of payment terminals, and some other devices such as ATM key pads and a data center HSM. We provide detailed photos of critical features. Based on our observations, we construct a taxonomy of mesh construction techniques. Our analysis reveals that most commercial devices use surprisingly simple construction techniques, and their structure size rarely approaches manufacturing limits. Based on our analysis, we identify a concise set of design patterns for the construction of secure tamper sensing meshes. We conclude that designing tamper sensing meshes that exceed the industrial state of the art is viable even using inexpensive and easily available manufacturing processes. Our set of design recommendations creates a foundation for both the practical tamper sensing mesh implementations and for future research into their design. Our results enable researchers to base test specimens on concrete evidence of industrial practice.

Metadata
Available format(s)
PDF
Category
Applications
Publication info
Published by the IACR in TCHES 2027
Keywords
Tamper Sensing Mesh (TSM)Security MeshHardware Security ModulePhysical Security
Contact author(s)
research @ jaseg de
bjoern scheuermann @ kom tu-darmstadt de
History
2026-10-14: approved
2026-10-14: received
See all versions
Short URL
https://ia.cr/2026/2475
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2026/2475,
      author = {Jan Sebastian Götte and Björn Scheuermann},
      title = {Tamper Sensing Meshes in Payment Terminals and Beyond},
      howpublished = {Cryptology {ePrint} Archive, Paper 2026/2475},
      year = {2026},
      url = {https://eprint.iacr.org/2026/2475}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.