Retour au portail de sécurité
Side-channel analysis (SCA) of PIN comparison
Signalé sur October 31, 2018
Using a SCA bench an attacker could create the database of power consumption and electromagnetic traces of a device. This database could later be used to unlock a locked device using the same SCA bench. The issue was fixed by rewriting the device storage to not compare PINs directly, but rather compare random data stretched by the PIN.
Fixed in firmware 1.8.0.
Vulnérabilités résolues
Signalé par la communauté. Examiné. Résolu. Parce que votre sécurité n’est jamais optionnelle.
- Authenticity proofs not bounded to their secure element on TS716 août 2026
- THP pairing could be completed without the pairing code22 juin 2026
- Desktop update could install before signature verification completed16 juin 2026
- Solana account-creation confirmation completeness14 juin 2026
- Solana signing display improvement12 juin 2026
- Coordination fee cap shown on CoinJoin authorization3 juin 2026