Voltar para o portal de segurança
Side-channel analysis (SCA) of PIN comparison
Reportado em October 31, 2018
Using a SCA bench an attacker could create the database of power consumption and electromagnetic traces of a device. This database could later be used to unlock a locked device using the same SCA bench. The issue was fixed by rewriting the device storage to not compare PINs directly, but rather compare random data stretched by the PIN.
Fixed in firmware 1.8.0.
Vulnerabilidades resolvidas
Reportado pela comunidade. Investigado. Resolvido. Porque sua segurança nunca é opcional.
- Authenticity proofs not bounded to their secure element on TS716 de agosto de 2026
- THP pairing could be completed without the pairing code22 de junho de 2026
- Desktop update could install before signature verification completed16 de junho de 2026
- Solana account-creation confirmation completeness14 de junho de 2026
- Solana signing display improvement12 de junho de 2026
- Coordination fee cap shown on CoinJoin authorization3 de junho de 2026