Jan Jancar

Minerva: The curse of ECDSA nonces

2020 · IACR Transactions on Cryptographic Hardware and Embedded Systems

We present our discovery of a group of side-channel vulnerabilities in implementations of the ECDSA signature algorithm in a widely used Atmel AT90SC FIPS 140-2 certified smartcard chip and five cryptographic libraries (libgcrypt, wolfSSL, MatrixSSL, …