The threat model here is defective hardware and not an attacker? Presumably an attacker with RCE could just make "more" activity via the verification path in order to accomplish their goals. Although I suppose this activity would be present in the tree, so you could conceivably audit it (somehow) and discover the attack.
The threat model here is defective hardware and not an attacker? Presumably an attacker with RCE could just make "more" activity via the verification path in order to accomplish their goals. Although I suppose this activity would be present in the tree, so you could conceivably audit it (somehow) and discover the attack.