Security advisory YSA-2017-01 - Yubico

The Infineon RSA key generation issue was discovered by an independent team of researchers from the University of Masaryk in the Czech Republic. The researchers found a method to identify mathematical weaknesses of particular algorithms for prime number generation.The method allows an attacker who only has the public portion of an RSA key pair generated on the secure element to compute the private key faster than the current state of the art attack.
Infineon confirms that the RSA key generation implemented in one of their cryptographic libraries is affected. The root cause of the issue lies within the cryptographic software library, not in the secure element itself – the symmetric and asymmetric hardware co-processors are not affected.