---
id: 4457
title: "How a Security Anomaly was Accidentally Found in an EAL6+ JavaCard"
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/how-a-security-anomaly-was-accidentally-found-in-an-eal6-javacard.html"
published_at: "2020-05-11T22:00:00Z"
tags: ["hardware", "side-channel", "timing-attack", "javacard", "pin", "iso7816"]
phying_url: "https://phying.com/item/4457"
lang: en
---

# How a Security Anomaly was Accidentally Found in an EAL6+ JavaCard

## Summary

A timing side-channel accidentally found in an EAL6+ JavaCard during the Inter-CESTI 2019 challenge: the OwnerPIN.check API leaks PIN length via measurable timing differences.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **Published:** 2020-05-11T22:00:00Z
- **Original:** https://blog.quarkslab.com/how-a-security-anomaly-was-accidentally-found-in-an-eal6-javacard.html
- **Phying News:** https://phying.com/item/4457