Researchers Forge Signatures Inside Secure Hardware Without Stealing Keys

Exploiting the Math Behind the Signature

A team led by researchers at UC San Diego and France’s INRIA demonstrated a novel attack on hardware security modules. They successfully forged digital signatures using a 1,024-bit RSA key stored inside the device. Crucially, they achieved this without extracting the private key itself. This vulnerability affects the type of secure vaults often used by cryptocurrency custodians to protect sensitive assets. The discovery highlights subtle weaknesses in how these devices process cryptographic requests.

The study focused on a specific flaw in the implementation of RSA operations within the hardware. The attackers manipulated the device to perform calculations that revealed enough information to create valid signatures. They did not need to pull the secret key out of the secure enclave. Instead, they exploited the way the module handled the mathematical steps required for signing. This approach bypasses traditional defenses that assume the key remains isolated and untouched during the operation.

The core of the attack relies on understanding the internal mechanics of RSA signature generation. Standard implementations follow a strict sequence of modular exponentiation and other arithmetic steps. The research team identified that slight variations in how the hardware executed these steps leaked data. By observing the timing or power consumption patterns, they could infer parts of the calculation. This allowed them to construct a valid signature for a chosen message. The method works because the hardware was not perfectly consistent in its execution path. Small deviations provided the clues needed to reverse-engineer the result.

Does This Threaten Bitcoin and Ethereum?

This technique is distinct from side-channel attacks that simply measure power usage over time. Here, the focus was on the logical flow of the algorithm. The researchers showed that even a well-protected module can be fooled if it processes inputs in a predictable but flawed manner. The attack does not require physical access to the chip’s pins or memory. It operates through standard communication channels, making it harder to detect in a production environment.

Many investors worry that any RSA vulnerability impacts all major cryptocurrencies. However, Bitcoin and Ethereum primarily use elliptic-curve cryptography for transaction signing. These networks rely on algorithms like ECDSA, not RSA. Therefore, the direct impact on these two blockchains is minimal. The paper’s findings specifically target RSA implementations. Other systems, however, may still depend on RSA for identity verification or secure communication. Financial institutions and cloud providers often use RSA for various backend tasks. If their hardware modules contain similar flaws, they remain exposed.

The distinction matters for understanding the scope of the risk. While your Bitcoin wallet might be safe from this specific bug, your bank’s secure element might not be. The attack demonstrates that hardware security is only as strong as its software logic. Even if the key stays inside the vault, the process of using that key can reveal secrets.

Frequently Asked Questions

Did the researchers steal the private key? No, the team did not extract the key. They forged signatures by manipulating the hardware’s processing logic while the key remained securely stored inside the module.

Is my Bitcoin wallet affected by this attack? Likely not directly. Bitcoin uses elliptic-curve signatures like ECDSA, whereas this attack targets RSA. Most modern Bitcoin wallets do not rely on RSA for transaction signing.

How can companies prevent this vulnerability? Developers should audit their hardware implementations for consistent execution paths. Adding randomization to the calculation steps can help mask the patterns that allow attackers to forge signatures.