YubiKeys Are a Security Gold Standard—but They Can Be Cloned

Quick Summary:

Security researchers have discovered a cryptographic flaw that leaves the YubiKey 5 vulnerable to attack.

This vulnerability lies in the ECDSA ephemeral key (or nonce) modular inversion, and, more precisely, in the Infineon implementation of the Extended Euclidean Algorithm (EEA for short).

In the present work, NinjaLab unveils a new side-channel vulnerability in the ECDSA implementation of Infineon 9 on any security microcontroller family of the manufacturer.

---

More Pictures

---

Read Quick SummarySave Time

or

Article Details

Author / Journalist: Dan Goodin, Ars Technica

Category: TechnologyEconomy

Markets: United StatesChinaIsraelJapan

Topics: Security Security / Cyberattacks and Hacks

Source Website Secure: Yes (HTTPS)

News Sentiment: Neutral

Fact Checked: Legitimate

Article Type: News Report

Published On: 2024-09-05 @ 21:01:38 (15 hours ago)

News Timezone: GMT +8:00

News Source URL: wired.com

Language: English

Article Length: 2065 words

Reading Time: 12 minutes read

Sentences: 96 lines

Sentence Length: 22 words per sentence (average)

Platforms: Desktop Web, Mobile Web, iOS App, Android App

Copyright Owner: © Wired

News ID: 22384293

View Article Analysis

About Wired

Main Topics: TechnologyEconomy

Official Website: wired.com

Update Frequency: 19 posts per day

Year Established: 1993

Headquarters: United States

News Last Updated: 17 hours ago

Coverage Areas: United States

Ownership: Independent Company

Publication Timezone: GMT +8:00

Content Availability: Worldwide

News Language: English

RSS Feed: Available (XML)

API Access: Available (JSON, REST)

Website Security: Secure (HTTPS)

Publisher ID: #111

Publisher Details

Frequently Asked Questions