Get the latest tech news
Infineon security microcontroller flaw enabled extraction of TPM secret keys
A few months ago, security researcher Thomas Roche presented his fundamental research on secure elements used in the YubiKey 5.
The security element is the Infineon SLE78, which contains a proprietary implementation of the Elliptic Curve Digital Signature Algorithm (ECDSA). Using side-channel attacks and a great deal of smart research, the author discovered a vulnerability in Infineon Technologies' cryptographic library and, as a result, was able to extract the ECDSA secret key from the secure element. 🔮 OT (Operational Technology) - used to ensure secure data transmission and device authentication
Or read this on Hacker News
