SRAM Has No Chill: Exploiting Power Domain Separation to Steal On-Chip Secrets.

Saved in:
Bibliographic Details
Title: SRAM Has No Chill: Exploiting Power Domain Separation to Steal On-Chip Secrets.
Authors: Mahmod, Jubayer1 (AUTHOR) jubayer@vt.edu, Hicks, Matthew1 (AUTHOR) mdhicks2@vt.edu
Source: Communications of the ACM. Aug2025, Vol. 68 Issue 8, p82-90. 9p.
Subjects: Cryptography, Static random access memory chips, Dynamic random access memory, Embedded computer systems, Systems on a chip, Computer security vulnerabilities
Abstract: The widespread use of embedded systems and smart devices has heightened the threat of physical memory attacks, such as cold boot attacks that exploit DRAM’s temporary data retention at low temperatures. Although storing secrets in on-chip SRAM typically protects against these attacks due to its isolation and minimal capacitance, this protection is not foolproof. This paper introduces Volt Boot, an attack that bypasses traditional defenses by exploiting uneven power states in system-on-chip architectures to retain data in volatile SRAM across reboots. Tested on modern ARM Cortex-A devices, Volt Boot reliably extracts sensitive information from caches, registers, and internal RAM with perfect accuracy and no need for low temperatures or complex processing.
Database: Engineering Source
Description
Abstract:The widespread use of embedded systems and smart devices has heightened the threat of physical memory attacks, such as cold boot attacks that exploit DRAM’s temporary data retention at low temperatures. Although storing secrets in on-chip SRAM typically protects against these attacks due to its isolation and minimal capacitance, this protection is not foolproof. This paper introduces Volt Boot, an attack that bypasses traditional defenses by exploiting uneven power states in system-on-chip architectures to retain data in volatile SRAM across reboots. Tested on modern ARM Cortex-A devices, Volt Boot reliably extracts sensitive information from caches, registers, and internal RAM with perfect accuracy and no need for low temperatures or complex processing.
ISSN:00010782
DOI:10.1145/3725845