2062
Nature Type ID Name Page
MemberOf 1199 General Circuit and Logic Design Concerns 1194 2471
MemberOf 1417 Comprehensive Categorization: Sensitive Information
Exposure
1400 2548
Related Attack Patterns
CAPEC-ID Attack Pattern Name
26 Leveraging Race Conditions
References
[REF-1079]Joe Fitzpatrick. "SCA4n00bz - Timing-based Sidechannel Attacks for Hardware N00bz
workshop". < https://github.com/securelyfitz/SCA4n00bz >.
CWE-1255: Comparison Logic is Vulnerable to Power Side-Channel Attacks
Weakness ID : 1255
Structure : Simple
Abstraction : Variant
Description
A device's real time power consumption may be monitored during security token evaluation and the
information gleaned may be used to determine the value of the reference token.
Extended Description
The power consumed by a device may be instrumented and monitored in real time. If the algorithm
for evaluating security tokens is not sufficiently robust, the power consumption may vary by token
entry comparison against the reference value. Further, if retries are unlimited, the power difference
between a "good" entry and a "bad" entry may be observed and used to determine whether each
entry itself is correct thereby allowing unauthorized parties to calculate the reference value.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 1300 Improper Protection of Physical Side Channels 2165
Relevant to the view "Hardware Design" (CWE-1194)
Nature Type ID Name Page
PeerOf 1259 Improper Restriction of Security Token Assignment 2073
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Operating_System : Not OS-Specific (Prevalence = Undetermined)
Architecture : Not Architecture-Specific (Prevalence = Undetermined)
Technology : Not Technology-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Confidentiality Modify Memory
CWE Version 4.14
CWE-1255: Comparison Logic is Vulnerable to Power Side-Channel Attacks
CWE-1255: Comparison Logic is Vulnerable to Power Side-Channel Attacks