Possible key extraction with oscilloscope

[tsusanka]

Impact: Key Exposure
Scalability: Local (Non-invasive)
Severity: High
Fixed in: Firmware 1.3.3
Reported by: Jochen Hoenicke
Date reported: 2015-03-26

Detail

With physical access to the device and an oscilloscope, an attacker could use Power Analysis to extract an individual private key from the device.

Fix

trezor/trezor-firmware@7c6d2fe

More details

Jochen's write-up