Bypassing debug password protection on the RH850 family using fault injection - https://blog.quarkslab.com/bypassing-debug-password-protection-on-the-rh850-family-using-fault-injection.html
Bypassing debug password protection on the RH850 family using fault injection - Quarkslab's blog

This blogpost explains how we bypassed the 16-byte password protection of the debug on several variants of the RH850 family using voltage fault injection.