French researchers have found a bug in a hardware security module (HSM) that could enable an attacker to steal highly prized secrets.