Yubico Addresses Side-Channel Vulnerability in Legacy Devices
Yubico identified a side-channel vulnerability in the cryptographic library used in several of its devices, including the YubiKey 5 Series. This vulnerability, related to ECDSA implementation, could allow attackers with physical access to recover private keys. Users must update to firmware version 5.7.0 or higher for protection, as older versions are permanently vulnerable. Recommended mitigations…