A non-invasive attack extracts information from a device without physically altering it. Against a smart card, an attacker might study power consumption during cryptographic operations to recover secret keys. section 13.2.2
Hardware attacks fall into three broad categories:
- Non-invasive attacks observe the device without affecting it, such as differential power analysis (DPA). section 13.2.2
- Semi-invasive attacks access the chip surface without damaging it and may alter execution using heat or lasers. section 13.2.2
- Invasive attacks open the chip to probe or modify its circuitry, risking visible damage or device failure. section 13.2.2
