PT-2019-14400 · Atmel+4 · Atmel Toolbox+4

Keegan Ryan · Published 2019-10-03 · Updated 2021-04-13 · CVE-2019-15809

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Athena IDProtect versions 010b.0352.0005 through 010e.1245.0002 Valid S/A IDflex V version 010b.0352.0005 SafeNet eToken 4300 version 010e.1245.0002 TecSec Armored Card versions 010e.0264.0001 through 108.0264.0001 Athena IDProtect version 0106.0130.0401

Description The issue is related to a timing side channel in ECDSA signature generation, which allows a local attacker to compute the private key used by measuring the duration of hundreds to thousands of signing operations. This occurs because the Atmel Toolbox 00.03.11.05 contains two versions of ECDSA signature functions, and the affected cards use the fast version, which leaks the bit length of the random nonce via timing.

Recommendations For Athena IDProtect versions 010b.0352.0005 through 010e.1245.0002, consider disabling the use of the fast ECDSA signature function until a patch is available. For Valid S/A IDflex V version 010b.0352.0005, restrict access to the ECDSA signature generation functionality to minimize the risk of exploitation. For SafeNet eToken 4300 version 010e.1245.0002, avoid using the affected cards for sensitive operations until a fix is provided. For TecSec Armored Card versions 010e.0264.0001 through 108.0264.0001, consider implementing additional security measures to prevent local attackers from measuring the signing operation duration. For Athena IDProtect version 0106.0130.0401, temporarily disable the ECDSA signature generation functionality to prevent potential exploitation.

Exploit

Fix

Side Channel Attack

Weakness Enumeration

CWE-203

Related Identifiers

CVE-2019-15809

Affected Products

Athena Idprotect

Atmel Toolbox

Idflex V

Safenet Etoken 4300

Tecsec Armored Card

References · 8

• 🔥 https://minerva.crocs.fi.muni.cz · Exploit
• https://osv.dev/vulnerability/CVE-2019-15809 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-15809 · Security Note
• https://eprint.iacr.org/2011/232.pdf · Note
• https://tches.iacr.org/index.php/TCHES/article/view/7337 · Note
• http://openwall.com/lists/oss-security/2019/10/02/2 · Note
• https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/details?source=ECDSA&number=214 · Note
• https://ssi.gouv.fr/certification_cc/bibliotheque-cryptographique-atmel-toolbox-00-03-11-05 · Note