Description
The Enova X-Wall ASIC encrypts with a key obtained via Microwire from a serial EEPROM that stores the key in cleartext, which allows local users with physical access to obtain the key by reading and duplicating an EEPROM that is located on a hardware token, or by sniffing the Microwire bus.
References
- 20060329 [HV-INFO] Enova hardware encryption: false sense of security mailing-list
- http://www.hexview.com/docs/20060328-1.txt
- 648 third-party-advisory
- enova-xwall-insecure-encryption-key(25527) vdb-entry