A Second-Order Side-Channel Attack on Masked Kyber768
Part 3 of our series on side-channel attacks against post-quantum cryptography: masking defeats the first-order attack, but <mark>masked Kyber768</mark> still falls to a second-order CPA.
No Fight, No Chance: Security Teams Must Become Hybrid AI Teams
The Ledger Donjon's journey from AI-assisted development to an AI security harness, and why <mark>offense is no longer only the best defense, but a required security capability.</mark>
Non-Profiled Deep Learning Side-Channel Attacks on ML-KEM
Part 2 of our series on side-channel attacks against post-quantum cryptography: we break the <mark>CRYSTALS ML-KEM reference implementation</mark> with a non-profiled deep learning attack — no clone device, no leakage model.
Laser Fault Injection on the TROPIC01 Open-Source Secure Element
We used laser fault injection to bypass Ed25519 signature verification on the <mark>TROPIC01 open-source secure element</mark>, achieving arbitrary firmware execution.
The Hidden Risk of Side-Channel Attacks on Post Quantum Cryptography
The Hidden Risk of Side-Channel Attacks on Post Quantum Cryptogra...
Quantum Computing’s Threat to Blockchain: The Enduring Need for Secure…
Quantum Computing’s Threat to Blockchain: The Enduring Need...
Enforcing BIP32 Hardened Derivation Prefixes for Enhanced Security
Enforcing BIP32 Hardened Derivation Prefixes for Enhanced Securit...
Is Your Smartphone’s Hardware Safe?
Smartphones are commonly lost or stolen, but could that impact your security? The Ledger Donjon targeted a recent SoC to find out exactly how secure today’s smartphones are.
The Vulnerability Exposing Tangem Cards to Brute-Force Attacks
The Vulnerability Exposing Tangem Cards to Brute-Force Attacks...
Tangem Genuine Check Bypass on Android Application
Tangem Genuine Check Bypass on Android Application
Why Secure Elements make a crucial difference to Hardware Wallet…
Why Secure Elements make a crucial difference to Hardware Wallet ...
TEE: When “Trusted” Doesn’t Mean “Secure”
TEE: When “Trusted” Doesn’t Mean “Secure&...
SCADL: A new side-channel attack tool using deep learning
SCADL: A new side-channel attack tool using deep learning...
Argo CD Security Misconfiguration Adventures
Argo CD Security Misconfiguration Adventures
Cargo-checkct: our home-made tool guarding against timing attacks is now…
Cargo-checkct: our home-made tool guarding against timing attacks...
Funds of Every Wallet Created With The Trust Wallet Browser…
Funds of Every Wallet Created With The Trust Wallet Browser Exten...
Firmware Extraction: Evil-Maid Attacks on Blockstream Jade Hardware Wallet
Firmware Extraction: Evil-Maid Attacks on Blockstream Jade Hardwa...
Prepping for Pwn2Own 2022
Prepping for Pwn2Own 2022
App Streaming: a New Development Paradigm for Environments with Constrained…
App Streaming: a New Development Paradigm for Environments with C...
New PIN screen on Ledger Nano products
New PIN screen on Ledger Nano products
Integrating fault injection in development workflows
Integrating fault injection in development workflows...
Mounting a low-cost laser bench
Mounting a low-cost laser bench
Black-box attacks on white-box ECDSA
Black-box attacks on white-box ECDSA
Donjon CTF 2021: Capture the Fortress!
Donjon CTF 2021: Capture the Fortress!
On the security of Booba’s music video and NFTs
On the security of Booba’s music video and NFTs...
Remote laser faults injection during pandemic
Remote laser faults injection during pandemic
Protecting SSH keys with TPM 2.0, now available on Debian
Protecting SSH keys with TPM 2.0, now available on Debian...
On the security model of software wallets
On the security model of software wallets
Kaspersky Password Manager: All your passwords belong to us
Kaspersky Password Manager: All your passwords belong to us...
A Compact Electromagnetic Fault Injection Setup
A Compact Electromagnetic Fault Injection Setup
The Making of picoHSM Challenge
The Making of picoHSM Challenge
Discovering SMPC through CTF Challenges
Discovering SMPC through CTF Challenges
Exploiting Smart Contracts in CTF Challenges
Exploiting Smart Contracts in CTF Challenges
Ghostbuster: Spectre exploitation in real life
Ghostbuster: Spectre exploitation in real life
CTF 2020: Capture the Fortress
CTF 2020: Capture the Fortress
Follow-up on PIN verification against side-channel attack: KeepKey Hardware Wallet…
Follow-up on PIN verification against side-channel attack: KeepKe...
Lit by Laser: PIN Code Recovery on Coldcard Mk2 Wallets
Lit by Laser: PIN Code Recovery on Coldcard Mk2 Wallets...
Ledger’s CTF 2018 and side-channels
Ledger’s CTF 2018 and side-channels
Everybody be Cool, This is a Robbery!
Everybody be Cool, This is a Robbery!
OLED screen (minor) vulnerability
OLED screen (minor) vulnerability
Unfixable Seed Extraction on Trezor – A practical and reliable…
Unfixable Seed Extraction on Trezor – A practical and relia...
Extracting seed from Ellipal wallet
Extracting seed from Ellipal wallet
Breaking Trezor One with Side Channel Attacks
Breaking Trezor One with Side Channel Attacks
Extracting seeds from Wallets
Extracting seeds from Wallets
Lascar: Donjon Side Channel Library
Lascar: Donjon Side Channel Library
Rainbow
Rainbow
Introducing Ledger Donjon
Introducing Ledger Donjon