An953
Monthly
Side-channel leakage in Microchip's AN1044, AN953, and SW300052 cryptographic reference implementations allows a physically proximate attacker with specialized measurement equipment to extract secret cryptographic keys through power, electromagnetic, or timing analysis. Affected through revision A (AN1044, AN953) and version 2.6 (SW300052), these application notes and associated library are commonly used by embedded developers implementing cryptography on Microchip microcontrollers, meaning extracted keys could compromise the security of devices and downstream systems they protect. No public exploit code is identified at time of analysis, but the attack methodology - Differential Power Analysis (DPA), Simple Power Analysis (SPA) - is well-documented in hardware security literature and reproducible by skilled researchers with commodity equipment.
Side-channel leakage in Microchip's AN1044, AN953, and SW300052 cryptographic reference implementations allows a physically proximate attacker with specialized measurement equipment to extract secret cryptographic keys through power, electromagnetic, or timing analysis. Affected through revision A (AN1044, AN953) and version 2.6 (SW300052), these application notes and associated library are commonly used by embedded developers implementing cryptography on Microchip microcontrollers, meaning extracted keys could compromise the security of devices and downstream systems they protect. No public exploit code is identified at time of analysis, but the attack methodology - Differential Power Analysis (DPA), Simple Power Analysis (SPA) - is well-documented in hardware security literature and reproducible by skilled researchers with commodity equipment.