3 ms·
Does that mean that now if you cut power at the same moment the fail counter increments even if the entered code was correct? Not that it's particularly useful
by qb45 11y ago
Does that mean that now if you cut power at the same moment the fail counter increments even if the entered code was correct?
Not that it's particularly useful for hackers, I'm just wondering if this can be done "perfectly" at all.
- cplease 11y agoYes you can, if you sync the commit to NVRAM before giving any external indication of success/failure, and don't leak through any side-channels. The CVE before demo'd by the famous youtube video was that you had a split second after failure was indicated where you could cut the power and keep the failure from being stored.