Ledger Donjon BlogSecurity research from the Donjon team at Ledger.https://donjon.ledger.com/A Second-Order Side-Channel Attack on Masked Kyber768https://donjon.ledger.com/blog/second-order-side-channel-attack-masked-kyber768/https://donjon.ledger.com/blog/second-order-side-channel-attack-masked-kyber768/Part 3 of our series on side-channel attacks against post-quantum cryptography: masking defeats the first-order attack, but <mark>masked Kyber768</mark> still falls to a second-order CPA.Fri, 26 Jun 2026 00:00:00 GMTNo Fight, No Chance: Security Teams Must Become Hybrid AI Teamshttps://donjon.ledger.com/blog/ai-security-harness-cerberus/https://donjon.ledger.com/blog/ai-security-harness-cerberus/The Ledger Donjon's journey from AI-assisted development to an AI security harness, and why <mark>offense is no longer only the best defense, but a required security capability.</mark>Wed, 17 Jun 2026 00:00:00 GMTNon-Profiled Deep Learning Side-Channel Attacks on ML-KEMhttps://donjon.ledger.com/blog/non-profiled-deep-learning-sca-ml-kem/https://donjon.ledger.com/blog/non-profiled-deep-learning-sca-ml-kem/Part 2 of our series on side-channel attacks against post-quantum cryptography: we break the <mark>CRYSTALS ML-KEM reference implementation</mark> with a non-profiled deep learning attack — no clone device, no leakage model.Thu, 11 Jun 2026 00:00:00 GMTLaser Fault Injection on the TROPIC01 Open-Source Secure Elementhttps://donjon.ledger.com/blog/tropic01-laser-fault-injection/https://donjon.ledger.com/blog/tropic01-laser-fault-injection/We used laser fault injection to bypass Ed25519 signature verification on the <mark>TROPIC01 open-source secure element</mark>, achieving arbitrary firmware execution.Wed, 03 Jun 2026 00:00:00 GMT