What does a $250,000 laser attack mean for your RP2350 board?

The attack in plain terms

A microcontroller leaves the factory with its debug port locked. That lock is meant to stay shut forever. Ledger Donjon found a way to open it without the key.

They aimed an infrared laser at precise spots on the silicon die while the chip was running. The beam flipped specific register bits. The debug interface woke up. The one-time programmable memory became readable. The laser setup costs about $250,000. The chip must be de-encapsulated first — acid or plasma removes the black epoxy package. The bare die sits under a microscope. The researcher knows exactly where to aim because they mapped the layout beforehand. The process destroys the chip. You cannot put it back on a board and keep working.

Why Raspberry Pi is not respinning the silicon

The organisation looked at the findings and decided against a new die revision. Three reasons appear in the announcement. First, the attack is destructive. The target chip never returns to service. Second, the scope stays on a single device if each unit carries its own keys. Third, the barrier to entry is a lab full of specialised gear and a very particular skill set.

The announcement does not say how many RP2350 units are in the field. It does not say whether per-device keys are the default configuration. It only states the assumption.

The previous laser winner and what changed

This is not the first time a laser has beaten an RP2350. During the first Hacking Challenge a participant named Courk built a homebrew infrared rig. That setup glitched the A2 stepping into misbehaving. The fix arrived as a boot ROM revision baked into the current A4 die. Courk's equipment was far cheaper than the Donjon lab. The A4 revision closed that specific path. The new research targets the A4 stepping. It does not rely on the same glitch. It uses a more precise beam and a deeper understanding of the register map. The announcement calls the work fantastic and thanks the team for responsible disclosure.

It also notes that the second Hacking Challenge, focused on side-channel analysis, remains unbeaten after two deadline extensions. That challenge runs until the end of next month.

What this changes for a board on your desk

Nothing immediate. The board in your project stays exactly as secure as it was yesterday. An attacker would need physical possession, a chemistry bench, a $250,000 laser station, and the expertise to drive it. If your threat model includes that adversary, you already knew the answer. If it does not, the announcement is a curiosity, not a crisis.

The second challenge may produce different results. Side-channel attacks often need less exotic hardware. Raspberry Pi has promised an update when that challenge ends. Until then, the lock on the debug port holds against every practical threat.