How a Security Anomaly was Accidentally Found in an EAL6+ JavaCard
blog.quarkslab.com | research | #hardware | #side-channel | #timing-attack | #javacard | #pin | #iso7816
Summary
A timing side-channel accidentally found in an EAL6+ JavaCard during the Inter-CESTI 2019 challenge: the OwnerPIN.check API leaks PIN length via measurable timing differences.
- Published
- Collected
--- id: 4457 title: "How a Security Anomaly was Accidentally Found in an EAL6+ JavaCard" source_domain: blog.quarkslab.com source_url: "https://blog.quarkslab.com/how-a-security-anomaly-was-accidentally-found-in-an-eal6-javacard.html" published_at: "2020-05-11T22:00:00Z" tags: ["hardware", "side-channel", "timing-attack", "javacard", "pin", "iso7816"] phying_url: "https://phying.com/item/4457" lang: en --- # How a Security Anomaly was Accidentally Found in an EAL6+ JavaCard ## Summary A timing side-channel accidentally found in an EAL6+ JavaCard during the Inter-CESTI 2019 challenge: the OwnerPIN.check API leaks PIN length via measurable timing differences. ## Intelligence Metadata - **Sources:** blog.quarkslab.com - **Published:** 2020-05-11T22:00:00Z - **Original:** https://blog.quarkslab.com/how-a-security-anomaly-was-accidentally-found-in-an-eal6-javacard.html - **Phying News:** https://phying.com/item/4457