CVE-2017-13094: The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of the encryption key and insertion of hardware trojans in any IP

Security readout for executives and security teams

This CVE concerns weaknesses in the IEEE P1735 standard for encrypting electronic-design intellectual property. The reported flaws can undermine confidentiality and integrity of protected IP, including possible plaintext recovery and unauthorized modification. The sources do not identify active exploitation, specific vulnerable tool versions, or a universal patch. Exposure is most likely in semiconductor, FPGA, EDA, and hardware-design workflows that rely on IEEE P1735 encrypted IP or tools implementing P1735. The bundle does not identify specific affected vendors, products, versions, or CPEs beyond IEEE P1735. Treat this as high priority if the business handles valuable electronic-design IP or relies on encrypted third-party IP. It may affect confidentiality, supplier trust, and hardware integrity, but urgency depends on whether IEEE P1735 is present in your design workflow. Mitigation focus: Inventory workflows using IEEE P1735 encrypted IP or access controls.; Check CERT VU#739007 and vendor guidance for implementation-specific remediation.; Ask EDA and IP suppliers whether their P1735 handling is affected..

Prepared

Jun 7, 2026, 13:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.