Jörn-Marc Schmidt, IU International University of Applied Sciences, Germany
Alexander Lawall, IU International University of Applied Sciences, Germany
Side-channel attacks exploit unintended physical leakages such as power consumption to compromise cryptographic implementations. Despite extensive research, practical experimentation typically requires costly and specialized equipment, limiting accessibility. This paper investigates whether effective power-based side-channel analysis can be achieved using low-cost hardware. The research goal is to evaluate the feasibility, effectiveness, and limitations of budget-constrained attacks. Accordingly, the study addresses the following questions: (i) Can inexpensive hardware enable reliable key recovery? (ii) What are the limitations regarding noise, sampling rate, and signal quality? (iii) How does clock frequency influence attack success? An experimental methodology based on Correlation Power Analysis (CPA) is applied to answer these questions. A Raspberry Pi Pico 2 is used to capture power traces from an ATtiny85 microcontroller executing Advanced Encryption Standard (AES) operations. The traces are analyzed using a Hamming-weight leakage model and Pearson correlation under varying clock frequencies. The results demonstrate that successful key recovery is achievable with minimal hardware, confirming the practical feasibility of low-cost side-channel attacks. However, limitations related to noise, trace alignment, and hardware constraints affect robustness. This work highlights critical security implications for embedded systems and contributes a reproducible, low-cost experimental framework.