Paper 2026/2475 Original: eprint.iacr.org/2026/2475 ↗

Tamper Sensing Meshes in Payment Terminals and Beyond

Jan Sebastian Götte
Björn Scheuermann
Abstract

Card Payment Terminals commonly use tamper sensing meshes to deter physical attacks on devices handling sensitive data such as cryptographic keys. Although their use of such meshes is frequently referenced in research literature, the public record contains little research on their construction. Addressing this gap, in this paper we present the first comprehensive analysis of the practical implementation of tamper sensing meshes across a wide range of payment terminals, and some other devices such as ATM key pads and a data center HSM. We provide detailed photos of critical features. Based on our observations, we construct a taxonomy of mesh construction techniques. Our analysis reveals that most commercial devices use surprisingly simple construction techniques, and their structure size rarely approaches manufacturing limits. Based on our analysis, we identify a concise set of design patterns for the construction of secure tamper sensing meshes. We conclude that designing tamper sensing meshes that exceed the industrial state of the art is viable even using inexpensive and easily available manufacturing processes. Our set of design recommendations creates a foundation for both the practical tamper sensing mesh implementations and for future research into their design. Our results enable researchers to base test specimens on concrete evidence of industrial practice.

Metadata
Available format(s)
PDF
Category
Applications
Publication info
Preprint.
History
2026-10-14: last updated
2026-10-14: published
Short URL
https://ia.cr/2026/2475
License
https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2026/2475,
      author = {Jan Sebastian Götte and Björn Scheuermann},
      title = {Tamper Sensing Meshes in Payment Terminals and Beyond},
      howpublished = {Cryptology {ePrint} Archive, Paper 2026/2475},
      year = {2026},
      url = {https://eprint.iacr.org/2026/2475}
}
Note: In order to protect the privacy of readers, this archive does not use cookies or embedded third party content.