Verilaptor: Software Fault Simultation in hardware designs

This report from HACK@CHES 2021 describes discovering and exploiting a fault vulnerability in the AES0 peripheral of an OpenPiton SoC. The authors implemented Verilaptor, a Verilator-based fault-injection framework that flips S-box outputs during late AES-192 rounds, collected faulty ciphertexts, and applied differential fault analysis to recover round keys and reconstruct the master key, demonstrating a full end-to-end key recovery in software.