Critical Vulnerability in YubiKey 5's Secure Element: Key Extraction Achieved
2025-06-15
Security researcher Thomas Roche uncovered a critical vulnerability in the Infineon SLE78 secure element used in YubiKey 5. Through side-channel attacks, he successfully extracted the ECDSA secret key. This vulnerability affects multiple versions of Infineon's cryptographic library, impacting security across automotive, medical, industrial control, and avionics sectors. The researcher urges industries to address this vulnerability immediately.
Read more
Tech
side-channel attack