NinjaLab is a company specialized in the analysis and improvement of the security of cryptographic implementations - [email protected]
Montpellier, France
Joined August 2017
- Tweets61
- Following45
- Followers616
- Likes46
@NinjaLabFr is proud to sponsor JAIF 2026⚡
➕ Join us for the French scientific day on fault attacks, hosted in the historic 800-year-old Faculty of Medicine of Montpellier 🏛️
🔗 jaif.io/2026/
The paper, entitled "Handling Noisy Plaintext Checking Oracles With SPiRiT - Application to Kyber" demonstrates the high resilience to noise of oracles-based attacks. Significantly raising the practical threat of side-channel attacks on ML-KEM.
Looking forward to see you !
Thomas Roche will be attending PQcrypto 2026 this week in Saint Malo - pqcrypto2026.irisa.fr/
Wednesday morning Paco Poilbout will be presenting his work on ML-KEM side-channel analysis, conducted during his master's internship at NinjaLab and LIRMM.
NinjaLab retweeted
A flaw in Infineon’s security microcontrollers made it possible to extract secret keys using a lab setup that cost just $11,000. 📟🔑👊🏻👨💻
More details on:
LinkedIn: linkedin.com/posts/dlaskov_h…
Substack: it4sec.substack.com/p/a-flaw…
Malek Sfaxi (aka @YoursSto), our new ninja currently intern at @NinjaLabFr , co-organizes the @N0PSctf , a 36 hours capture-the-flag challenge which will happen from 31 of May to 1 of June 2025.
Feel free to participate !
nops.re/
We are proud to announce that a conference paper about #EUCLEAK (SCA attack against Infineon secure elements affecting Yubikeys: ninjalab.io/eucleak/) has been accepted to @IEEESSP 2025.
Thomas will be there next week to present his work, if you are in SF, come and say hi!
NinjaLab retweeted
In case you missed it…Breaking Down the EUCLEAK Attack! 🤯
Thomas Roche at #hw_ioNL2024 explained it’s impact on YubiKey 5 Series and Infineon Security Systems
YouTube Link: youtu.be/yIkc8DzANUs?si=02Ne…
#EUCLEAKAttack #sidechannel #hardwaresecurity
Thanks to Laurent Imbert (@CNRS research director and PhD advisor), @lirmm_ and @umontpellier for having allowed that 🙏
Today Camille Mutschler, the first @NinjaLabFr employee, successfully defended her PhD thesis about post-quantum cryptography and side-channel attacks, in front of a jury of world-renowned cryptography researchers !
Congratulations to her 👩💻👩🎓🥳
NinjaLab retweeted
For people attending @EUCyberWeek this week in Rennes, do not miss today the presentation of my associate Thomas Roche about his last research work #EUCLEAK, a side-channel vulnerability impacting the ECDSA implementation of all secure elements of @Infineon
📝✨ On today's European Cyber Week program: CAID by AMIAD, Job Dating, Hazard Generation, European Day/EU Guardian, CTF Challenge, Crypto post-quantum, C&ESAR by DGA...
And much more here 👉european-cyber-week.eu/progr…
NinjaLab retweeted
⏰ Speaker Announcement - SecSea 2K24 🚨
🎤 Thomas Roche @NinjaLabFr présentera EUCLEAK, une vulnérabilité découverte après 14 ans chez Infineon, impactant les clés FIDO comme YubiKey.
📅 Vendredi 11 octobre à 14h
🎟️: helloasso.com/associations/h…
#SecSea2024 #EUCLEAK #Cryptography
Press release from BSI about 𝐄𝐔𝐂𝐋𝐄𝐀𝐊 vulnerability. German only, here is the Google translated version:
translate.google.com/transla…
NinjaLab retweeted
⚠️ Unearthing a Side-Channel Vulnerability Undetected for 14 Years! 🚨
Join Thomas Roche at #hw_ioNL2024 to dive deep into a critical side-channel flaw in Infineon Technologies' secure elements—missed in 80+ high-level Common Criteria assessments
More: hardwear.io/netherlands-2024…
We checked on a vulnerable YubiKey 5C: on the acquired traces the ECDSA signature with the attestation key is easily identifiable and then EUCLEAK must apply.
In fact this was already covered by Yubico advisory (see section "Attestation"): yubico.com/support/security-…
This attack is very specific to Infineon implementation. It is not running inside a phone secure enclave (AFAIK).
For a complete list of Yubico impacted products:
yubico.com/support/security-…
