セキュリティポータルに戻る

Side-channel analysis (SCA) of PIN comparison

報告日：October 31, 2018

Using a SCA bench an attacker could create the database of power consumption and electromagnetic traces of a device. This database could later be used to unlock a locked device using the same SCA bench. The issue was fixed by rewriting the device storage to not compare PINs directly, but rather compare random data stretched by the PIN.

Fixed in firmware 1.8.0.

Trezor Model One, Trezor Model T

修正済みの脆弱性

コミュニティからの報告により、調査を行い、問題を解決しました。あなたのセキュリティは常に最優先です。