Secret leak via SRAM residue

[tsusanka]

Impact: Seed Exposure
Scalability: Local (Destructive)
Severity: Moderate
Fixed in: Firmware 1.5.2
Reported by: Sunny
Date reported: 2017-08-01

Detail

The SRAM was not cleared on soft reset, allowing extraction using special firmware and direct access to the device board.

Fix

trezor/trezor-firmware@98e617d

More details

• Official blogpost
• Saleem's write-up