Új, harmadik fél csatornáin történő támadási technika, amely lehetővé teszi az ECDSA kulcsok helyreállítását
A Masaryk University researcher revealed vulnerabilities in various implementations of the ECDSA/EdDSA digital signature algorithm, which allow the recovery of the private key value by analyzing the information leaks of individual bits that occur when side-channel analysis methods are applied. The vulnerabilities have been codenamed Minerva. The most notable projects affected by the proposed attack method are OpenJDK/OracleJDK (CVE-2019-2894) and […]
