Skip to content
How a Security Anomaly was Accidentally Found in an EAL6+ JavaCard
blog.quarkslab.com | research | #hardware | #side-channel | #timing-attack | #javacard | #pin | #iso7816
Summary
A timing side-channel accidentally found in an EAL6+ JavaCard during the Inter-CESTI 2019 challenge: the OwnerPIN.check API leaks PIN length via measurable timing differences.
- Published
- Collected