CVE-2023-33241: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Crypto wallets implementing the GG18 or GG20 TSS protocol might allow an attacker to extract a full ECDSA private key by injecting a malicious pallier key and cheating in the range proof. Depending on the Beta parameters chosen in the protocol implementation, the attack might require 16 signature...

PT-2023-24238

Name of the Vulnerable Software and Affected Versions Crypto wallets implementing the Lindell17 TSS protocol affected versions not specified Description The issue allows an attacker to extract the full ECDSA private key by exfiltrating a single bit in every signature attempt, totaling 256 attempt...

CVE-2021-3011

An electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security microcontrollers and A7x secure authentication microcontrollers, with CryptoLib through v2.9. It allows attackers to extract the ECDSA private key after extensive physical access and consequently produce a...

CVE-2021-3011: Always-Incorrect Control Flow Implementation

An electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security microcontrollers and A7x secure authentication microcontrollers, with CryptoLib through v2.9. It allows attackers to extract the ECDSA private key after extensive physical access and consequently produce a...

PT-2019-4639

Name of the Vulnerable Software and Affected Versions STMicroelectronics ST33TPHF2ESPI TPM devices versions prior to 2019-09-12 Description The issue is related to a side-channel timing attack that allows attackers to extract the ECDSA private key due to mishandled ECDSA scalar multiplication. Th...