Diode-Based Multi-Trojan RF Retroreflector Attack

Electromagnetic cybersecurity is becoming a major concern due to the increasing number of EM vulnerabilities, exploited either through passive listening to EM leakage or active data retrieval, with or without a hardware Trojan. In this work, we focus on RF retroreflector attacks, where a passive hardware Trojan is implanted within the target. Specifically, we extend this concept to a multi-Trojan attack by leveraging spectral diversity to distinguish between different Trojans. This approach is demonstrated by attacking the three color components of a VGA link, enabling the recovery of colored images. Additionally, we introduce a diode-based Trojan architecture as an alternative to the existing transistor-based design.