Voltar para o portal de segurança

Side-channel analysis (SCA) of PIN comparison

Reportado em October 31, 2018

Using a SCA bench an attacker could create the database of power consumption and electromagnetic traces of a device. This database could later be used to unlock a locked device using the same SCA bench. The issue was fixed by rewriting the device storage to not compare PINs directly, but rather compare random data stretched by the PIN.

Fixed in firmware 1.8.0.

Reportado por Charles Guillemet
Trezor Model One, Trezor Model T