Zurück zum Sicherheitsportal
Side-channel analysis (SCA) of PIN comparison
Gemeldet auf October 31, 2018
Using a SCA bench an attacker could create the database of power consumption and electromagnetic traces of a device. This database could later be used to unlock a locked device using the same SCA bench. The issue was fixed by rewriting the device storage to not compare PINs directly, but rather compare random data stretched by the PIN.
Fixed in firmware 1.8.0.
Behobene Sicherheitslücken
Gemeldet durch Community. Untersucht. Gelöst. Weil deine Sicherheit nie optional ist.
- Authenticity proofs not bounded to their secure element on TS716. August 2026
- THP pairing could be completed without the pairing code22. Juni 2026
- Desktop update could install before signature verification completed16. Juni 2026
- Solana account-creation confirmation completeness14. Juni 2026
- Solana signing display improvement12. Juni 2026
- Coordination fee cap shown on CoinJoin authorization3. Juni 2026