Matter is an open-source connectivity standard for smart home and Internet of Things (IoT) devices. While the Matter standard has been designed with security in mind, it does not explicitly specify how to protect the cryptographic material that a device must use to prove its authenticity.

In this white paper, Nozomi Networks Labs explores the implementation of one of the first commercially available devices that uses the Matter connectivity standard. We show how it is possible to bypass the protection mechanism put in place by the manufacturer to access the device’s private cryptographic material.