Cryptographic Weakness in SiXG301's SYMCRYPTO Engine by Silicon Labs

CVE-2026-4930

What is CVE-2026-4930?

The SYMCRYPTO engine in Silicon Labs' SiXG301 device, which accelerates AES encryption and hashing operations, presents a vulnerability. If an attacker manages to execute code on the impacted device, they can manipulate certain seed values, thus weakening the DPA countermeasures. This reduction in entropy increases the risk of key extraction through Differential Power Analysis (DPA) attacks, making the cryptographic keys stored in SYMCRYPTO more susceptible to unauthorized access.

References