A flaw in Infineonβs security microcontrollers made it possible to extract secret keys using a lab setup that cost just $11,000. ππππ»π¨βπ»
A few months ago, security researcher Thomas Roche presented his fundamental research on secure elements used in the YubiKey 5. The security element is the Infineon SLE78, which contains a proprietary implementation of the Elliptic Curve Digital Signature Algorithm (ECDSA).Using side-channel attacks and a great deal of smart research, the author discovered a vulnerability in Infineon Technologies' cryptographic library and, as a result, was able to extract the ECDSA secret key from the secure el...
Read more at it4sec.substack.com