So this is the vulnerability that broke the Estonian ID card program (see the technical references and media section). I had a feeling that was related to the I

So this is the vulnerability that broke the Estonian ID card program (see the technical references and media section). I had a feeling that was related to the Infineon TPM vulnerability; it seemed unlikely that TPMs were the only product affected or that two incredibly similar but unrelated vulns would come along at the same time. (See also https://arstechnica.com/information-technology/2017/10/crypto-failure-cripples-millions-of-high-security-keys-750k-estonian-ids/ https://arstechnica.com/information-technology/2017/10/crypt...)