Paper 2026/752

GlitchSnipe: Toward Localized Voltage Fault Attacks

Fatemeh Khojasteh Dana, Worcester Polytechnic Institute
Saleh Khalaj Monfared, Worcester Polytechnic Institute
Hamed Okhravi, MIT Lincoln Laboratory
Shahin Tajik, Worcester Polytechnic Institute
Abstract

Voltage glitching is one of the most prominent fault injection techniques due to its effectiveness and simplicity. Although it is generally regarded as a spatially global fault method, in which the injected glitch uniformly affects all circuits on the die, several studies have observed that specific locations may be affected more than others. To characterize this phenomenon, we draw inspiration from methods used in electromagnetic interference (EMI) analysis. In this paper, we demonstrate that voltage attacks can be modeled as the transfer of conducted electromagnetic energy through the power delivery network (PDN) to the chip’s die. By analyzing voltage glitches in the frequency domain and modeling the PDN as a communication channel, we demonstrate that different frequency components of an injected glitch signal propagate through the network in distinct patterns. In this context, we further show that modulating the supply voltage with a single-frequency sinusoidal signal, rather than injecting a pulse-shaped glitch, enables an adversary to influence transistors in specific regions of the chip and thus induce localized faults. To validate these claims, we first propose a post-silicon profiling framework that identifies the frequency bands in which the system’s PDN is most vulnerable and maps the spatial regions of the chip affected by each frequency component. To this end, we perform extensive profiling on several FPGAs using distributed time-to-digital converters (TDCs) to measure the impact of injected signals across a range of frequencies. As a proof-of-concept, we also demonstrate successful localized voltage attacks on simple FSMs and AES-128 implementations with various placements, to further show the sensitivity of chip locations to injected energy at different frequencies. Our results reveal that even minor changes in design placement can significantly affect a circuit’s susceptibility to voltage-based fault attacks, either weakening or strengthening its resilience.

Metadata
Available format(s)
PDF
Category
Implementation
Publication info
Published by the IACR in TCHES 2026
Keywords
Electromagnetic PropagationPower Delivery NetworkTime-to-Digital ConverterVoltage Fault AttacksVoltage Glitching
Contact author(s)
fdana @ wpi edu
skmonfared @ wpi edu
hamed okhravi @ ll mit edu
stajik @ wpi edu
History
2026-07-10: revised
2026-04-16: received
See all versions
Short URL
https://ia.cr/2026/752
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2026/752,
      author = {Fatemeh Khojasteh Dana and Saleh Khalaj Monfared and Hamed Okhravi and Shahin Tajik},
      title = {{GlitchSnipe}: Toward Localized Voltage Fault Attacks},
      howpublished = {Cryptology {ePrint} Archive, Paper 2026/752},
      year = {2026},
      url = {https://eprint.iacr.org/2026/752}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.