> The first step was to dump the firmware of the device since it's not publicly available, and we did that thanks to a blog post by the COSIC research group at KU Leuven.

And they contribute by not sharing the firmware :(

I know it might have legal issues, but this is not helpful for other researchers if we keep things hidden