Ledger Donjon Bypasses RP2350 Security with Laser Fault Injection
Ledger Donjon researchers successfully bypassed the security features of the Raspberry Pi RP2350 microcontroller using a laser fault injection attack. By targeting a specific register on the chip's die, they re-enabled debug access to the secure execution zone and extracted a 128-bit secret key. The attack required a specialized bench setup costing approximately 250,000 USD and involved decapping the chip to locate the target via photon-emission electron microscopy.