CVE-2021-3011: Key recovery on Google Titan Key

#1

Post by hexa- » Thu, Jan 07, 2021, 7:00 PM UTC

CVE-2021-3011: Key recovery on Google Titan Key
ninjalab.io

Re: CVE-2021-3011: Key recovery on Google Titan Key

#2

Post by slimsag » Thu, Jan 07, 2021, 7:40 PM UTC

Why does this blog have a loading bar that gets stuck around 99% for me? Every request has loaded and is cached by my browser, yet it hangs at 99% artificially for like 30s.

Re: CVE-2021-3011: Key recovery on Google Titan Key

#3

Post by Thaxll » Thu, Jan 07, 2021, 7:42 PM UTC

"It allows attackers to extract the ECDSA private key after extensive physical access"

So if you have physical access of the device is it an issue?

Re: CVE-2021-3011: Key recovery on Google Titan Key

#4

Post by pat2man » Thu, Jan 07, 2021, 7:43 PM UTC

There is a list of other affected keys at the bottom of the article.

Re: CVE-2021-3011: Key recovery on Google Titan Key

#5

Post by junon » Thu, Jan 07, 2021, 7:45 PM UTC

slimsag wrote: post #2

Why does this blog have a loading bar that gets stuck around 99% for me? Every request has loaded and is cached by my browser, yet it hangs at 99% artificially for like 30s.

It's this new frontend craze of putting artificial loading bars as a placebo effect. Github does it, for example. The site is just really slow, and the status bars are rarely, if ever, hooked up to the actual loading metrics.

Re: CVE-2021-3011: Key recovery on Google Titan Key

#6

Post by junon » Thu, Jan 07, 2021, 7:46 PM UTC

Thaxll wrote: post #3

"It allows attackers to extract the ECDSA private key after extensive physical access" So if you have physical access of the device is it an issue?

If by "you" meaning the owner, than it appears not. That would be a remote vulnerability.

Re: CVE-2021-3011: Key recovery on Google Titan Key

#7

Post by tyingq » Thu, Jan 07, 2021, 7:46 PM UTC

slimsag wrote: post #2

Why does this blog have a loading bar that gets stuck around 99% for me? Every request has loaded and is cached by my browser, yet it hangs at 99% artificially for like 30s.

I don't know why it does that, but I looked at it and it's using something called "Pace Progress Bar".

Source for it: https://github.com/CodeByZach/pace

Re: CVE-2021-3011: Key recovery on Google Titan Key

#8

Post by gabrielsroka » Thu, Jan 07, 2021, 7:48 PM UTC

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3011

Re: CVE-2021-3011: Key recovery on Google Titan Key

#9

Post by pfortuny » Thu, Jan 07, 2021, 7:48 PM UTC

Thaxll wrote: post #3

"It allows attackers to extract the ECDSA private key after extensive physical access" So if you have physical access of the device is it an issue?

“ 6000 observations”. I guess a single whole night can be enough. You sleep at a hotel, your key fob is cloned.

Re: CVE-2021-3011: Key recovery on Google Titan Key

#10

Post by rossmohax » Thu, Jan 07, 2021, 7:49 PM UTC

List of products affected mentions "Yubico Yubikey Neo" as vulnerable too