ROCA and Minerva Vulnerabilities
| Authors | |
|---|---|
| Year of publication | 2025 |
| Type | Chapter of a book |
| MU Faculty or unit | |
| Citation | |
| Description | The chapter in the book describes principles and lessons learned from ROCA and Minerva vulnerabilities. ROCA and Minerva are two examples of real-world practically exploitable vulnerabilities found in cryptographic smartcards certified to high security levels under the Common Criteria certification scheme. Both vulnerabilities allow the extraction of the corresponding private key -- RSA primes for ROCA and private scalar for ECDSA in the case of Minerva. The exploitation utilizes a lattice-reduction-based algorithm in both cases. |
| Related projects: |