Side-channel analysis (SCA) of PIN comparison

[tsusanka]

Impact: Theft of Funds
Scalability: Local (Destructive)
Severity: Moderate
Fixed in: Firmware 1.8.0
Reported by: Charles Guillemet
Date reported: 2018-10-31

Details

Using a SCA bench an attacker could create the database of power consumption and electromagnetic traces of a device. This database could later be used to unlock a locked device using the same SCA bench. The issue was fixed by rewriting the device storage to not compare PINs directly, but rather compare random data stretched by the PIN.

Fix

trezor/trezor-firmware@4f32cb5

Read more

Official blogpost