CVE-2020-25082 – An attacker with physical access to Nuvoton Trusted Platform Module (NPCT

An attacker with physical access to Nuvoton Trusted Platform Module (NPCT75x 7.2.x before 7.2.2.0) could extract an Elliptic Curve Cryptography (ECC) private key via a side-channel attack against ECDSA, because of an Observable Timing Discrepancy.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25082

Reference (s):

• https://www.nuvoton.com/support/product-related-information/security-advisories/sa-002/