CWE-1239Variant

Improper Zeroization of Hardware Register

Draft in the CWE catalog · 0 CVEs mapped

0
CVEs mapped
What it is

The hardware product does not properly clear sensitive information from built-in registers when the user of the hardware block changes.

The record
Technical detail
CWE ID
CWE-1239
Abstraction
Variant
Structure
Simple
Status
Draft
References (4)
https://csrc.nist.gov/files/pubs/fips/140-2/upd2/final/docs/fips1402.pdfhttps://www.usenix.org/legacy/events/sec01/full_papers/gutmann/gutmann.pdfhttps://github.com/HACK-EVENT/hackatdac21/blob/b9ecdf6068445d76d6bee692d163fededf7a9d9b/piton/design/chip/tile/ariane/src/sha256/sha256_wrapper.sv#L94-L116https://github.com/HACK-EVENT/hackatdac21/blob/e8ba396b5c7cec9031e0e0e18ac547f32cd0ed50/piton/design/chip/tile/ariane/src/sha256/sha256_wrapper.sv#L98C1-L139C18