返回安全门户

Side-channel analysis (SCA) of PIN comparison

报告时间：October 31, 2018

Using a SCA bench an attacker could create the database of power consumption and electromagnetic traces of a device. This database could later be used to unlock a locked device using the same SCA bench. The issue was fixed by rewriting the device storage to not compare PINs directly, but rather compare random data stretched by the PIN.

Fixed in firmware 1.8.0.

Trezor Model One, Trezor Model T

已修复的漏洞

由社区报告，经调查后已解决。因为您的安全永远不可妥协。