On-site articles and curated posts from the Donjon team on the Ledger corporate blog.
Part 2 of our series on side-channel attacks against post-quantum cryptography: we break the <mark>CRYSTALS ML-KEM reference implementation</mark> with a non-profiled deep learning attack — no clone device, no leakage model.
We used laser fault injection to bypass Ed25519 signature verification on the <mark>TROPIC01 open-source secure element</mark>, achieving arbitrary firmware execution.
The Hidden Risk of Side-Channel Attacks on Post Quantum Cryptogra...
Quantum Computing’s Threat to Blockchain: The Enduring Need...
Enforcing BIP32 Hardened Derivation Prefixes for Enhanced Securit...
Smartphones are commonly lost or stolen, but could that impact your security? The Ledger Donjon targeted a recent SoC to find out exactly how secure today’s smartphones are.
The Vulnerability Exposing Tangem Cards to Brute-Force Attacks...
Tangem Genuine Check Bypass on Android Application
Why Secure Elements make a crucial difference to Hardware Wallet ...
TEE: When “Trusted” Doesn’t Mean “Secure&...
SCADL: A new side-channel attack tool using deep learning...
Argo CD Security Misconfiguration Adventures
Cargo-checkct: our home-made tool guarding against timing attacks...
Funds of Every Wallet Created With The Trust Wallet Browser Exten...
Firmware Extraction: Evil-Maid Attacks on Blockstream Jade Hardwa...
Prepping for Pwn2Own 2022
App Streaming: a New Development Paradigm for Environments with C...
New PIN screen on Ledger Nano products
Integrating fault injection in development workflows...
Mounting a low-cost laser bench
Black-box attacks on white-box ECDSA
Donjon CTF 2021: Capture the Fortress!
On the security of Booba’s music video and NFTs...
Remote laser faults injection during pandemic
Protecting SSH keys with TPM 2.0, now available on Debian...
On the security model of software wallets
Kaspersky Password Manager: All your passwords belong to us...
A Compact Electromagnetic Fault Injection Setup
The Making of picoHSM Challenge
Discovering SMPC through CTF Challenges
Exploiting Smart Contracts in CTF Challenges
Ghostbuster: Spectre exploitation in real life
CTF 2020: Capture the Fortress
Follow-up on PIN verification against side-channel attack: KeepKe...
Lit by Laser: PIN Code Recovery on Coldcard Mk2 Wallets...
Ledger’s CTF 2018 and side-channels
Everybody be Cool, This is a Robbery!
OLED screen (minor) vulnerability
Unfixable Seed Extraction on Trezor – A practical and relia...
Extracting seed from Ellipal wallet
Breaking Trezor One with Side Channel Attacks
Extracting seeds from Wallets
Lascar: Donjon Side Channel Library
Rainbow
Introducing Ledger Donjon