Please note the EUCLEAK vulnerability

Announcement related to the EUCLEAK security issue - a cybersecurity attack on private keys stored on hardware media.

Since approximately September 2024, the cybersecurity professional community and trade press have been discussing an issue referred to as "EUCLEAK" related to a freshly discovered cybersecurity weakness in selected microcontroller chips and related firmware for security smart cards and tokens.

This security issue was identified and well described in a report by NinjaLab' s expert consultants and showed a certain possibility how the security of a private key stored in the respective hardware device, e.g. token or smart card, can be attacked under certain, very specific, conditions.

In cooperation with our main technology supplier, Giesecke+Devrient GmbH, we have carried out a preventive security check of the hardware technologies used for STARCOS smart cards distributed to customers in the Czech Republic and abroad.

We can thus report that the STARCOS smart cards do not suffer from the security weakness and that the security audits and certificates for the STARCOS cards issued are still valid.

We will continue to carry out preventive security monitoring of our products in order to improve security standards and solutions.