I don't know whether this is true, but it's definitely possible (there are pin-compatible 64 KiB variants of the MCU). If you use the device without verifying the hardware, it's game over. To prevent Evil Maid attacks, that means checking at EVERY use.https://www.reddit.com/r/ledgerwallet/comments/86b7dk/important_to_everyone_who_bought_a_nano_ledger_s/ …
Ah, the low-power series. I was one level too deep into the part picker. The problem with the F3 is the GND pins. F0 uses the exposed pad as GND. If you're lucky either of those F3 GNDs is unused and grounded in the Ledger... but I'd need to look at the PCB.
-
-
But you're right, at first glance the STM32L062K8T6 would likely work. I'd have to look at the specific peripherals used and layout on the Ledger to make sure there would be no showstoppers. Though you could perhaps mitigate with a proof of work as a benchmark :-)
-
I think the chip is currently clocked low anyway and I would definitely try clocking it (the existing chip) high to defeat their new timing checks if you were trying to attack 1.4.1.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.