Security researchers have discovered a cryptographic flaw that leaves the YubiKey 5 vulnerable to attack.

More precisely, the side channel is located in the Infineon implementation of the Extended Euclidean Algorithm, a method for, among other things, computing the modular inverse.