DPA Vulnerabilities in Series 2 Modules and SoCs by Silicon Labs

CVE-2025-3301

Summary

Silicon Labs' Series 2 modules and SoCs exhibit vulnerabilities related to Differential Power Analysis (DPA) due to insufficient support for countermeasures in ECDH key agreement and EdDSA signing operations, specifically on Curve25519 and Curve448. Without robust countermeasures, these components may be susceptible to DPA attacks, which could potentially allow attackers to expose sensitive information. It is advisable to implement the vulnerable crypto curves and operations with ephemeral keys to minimize the collection of DPA traces, thereby enhancing security.

References