ECC Key Extraction via Timing Attack

Description

ECC Key Extraction via Timing Attack

CWE

208

CVE

27208

Attack Surfaces

Cryptographic Algorithm Implementation (MITRE EMB3D PID-11)

private key (MITRE EMB3D PID-12)

Debug Interface (MITRE EMB3D PID-15)

SoloKey

Attack Vectors

Timing Side-Channel (MITRE EMB3D TID-330)

Defenses

Protection against SCA in micro-ecc Library, Randomization of the Projective Coordinates in the ECDSA Implementation, Randomize Elliptic Curve Base Point