CAST IN THE NAME OF GOD. YE NOT GUILTY. ^ Apparently an RSA-OAEP constant in a version of Nintendo 3DS game card anti-piracy that was never used.
-
Yeah, the backward-compatible DSi key slots on the 3DS still had the partial overwrite. The 3DS-specific slots did not have this flaw, but had another that broke it. The RSA keyslots had their own partial key overwrite attack, but it wasn’t useful to compromise those keys.
I love how that bug has broken at least a half dozen, probably many more, embedded crypto implementations. *All* companies where the HW design team aren't security engineers, and where the security engineers aren't HW designers, screw that up.
![Adam [he/him]](https://pbs.twimg.com/profile_images/2328235588/mky7liyb93paqco9cfuk_normal.gif)
