4 ms·
This was published in 2015. Updating to a more recent firmware, which requires a PIN when computing the public key, eliminates the utility of such an attack.
by atdrummond 8y ago
This was published in 2015. Updating to a more recent firmware, which requires a PIN when computing the public key, eliminates the utility of such an attack.
- deleted 8y ago[deleted]
- aaron_m04 8y agoInteresting. Do you have a link where I could read more about this?
- cyphunk 8y agohttps://github.com/trezor/trezor-mcu/commits/master?after=3185eb0fd444701e2bc976555545fe08d572c957+769 https://github.com/trezor/trezor-mcu/commits/master?after=31... As jochen mentions in his timeline in the post trezor asked he delay publication until they could fix the bug in release 1.3.3. he says they included a fix on Mar 30 which you'll find in the link above