Is your device’s update protocol secure? And even if so, do updates introduce new and significant exploitable vulnerabilities? Is a security certified device still certified after a firmware update? How do we achieve effective and affordable ways to keep device updates secure? A video keynote by Marc Witteman, CEO of Riscure, originally presented at the Workshop on Security for Embedded and Mobile Systems (SEMS), Paris, April 30, 2017.
Abstract: Side-channel analysis (SCA) extracts sensitive information from a device by analyzing information that is leaked through side channels. These measurements are correlated with specific operations executed on the device, e.g., encryption or decryption,...
At Riscure we have observed many severe security issues exploited by hackers even in previously certified solutions. In recent years, certification, which aims to minimize security risks, has become more important, especially in the mobile application industry....
Cryptographic side channels are well-known and understood in the industry. There are also many countermeasures against side channels to reduce the leakage risk. However, many implementations in the field are leaky because of the combination of security experts and the...