Side-channel analysis (SCA) of PIN comparison

Reported on October 31, 2018

Using a SCA bench an attacker could create the database of power consumption and electromagnetic traces of a device. This database could later be used to unlock a locked device using the same SCA bench. The issue was fixed by rewriting the device storage to not compare PINs directly, but rather compare random data stretched by the PIN.

Fixed in firmware 1.8.0.

Reported by Charles Guillemet

Our blog post

Trezor Model One, Trezor Model T

Resolved vulnerabilities

Reported by community. Investigated. Resolved. Because your security is never optional.

Trezor T Bootloader firmware update retry could skip header checks
September 29, 2026
E-shop referral discount could be applied to eGift card purchases
September 16, 2026
Authenticity proofs not bounded to their secure element on TS7
August 16, 2026
Monero payment ID could be signed without being shown
August 13, 2026
Missing bounds check in JPEG image decoding
August 12, 2026
Cardano output datum and reference script not shown in simple transactions
August 11, 2026