Giving Mobile Security the Boot

Recommendations

Info

Setting up Trustzone • 32-bit: – CPU boots into secure world (NS=0) – Loader/kernel sets up monitor vector (SMC, IRQ or FIQ entries) – Sets up SCR NS=1 and “drops” to Normal World • 64-bit: – CPU boots into EL3 异常向量表基地址寄存器指定 – Secure Monitor sets up VBAR_Elx (SError, IRQ or FIQ entries) – Drops to EL2 (Hypervisor, 管理程序 ) or EL1 (kernel, 内核 ) (C) 2016 Jonathan Levin & Technologeeks.com - Share freely, but please cite source!
AArch64 Exception Handling 0x000 Synchronous Currrent EL, SP0 IRQ/vIRQ FIQ/vFIQ SError/vSError Currrent EL, SPSel Lower EL, AArch64 Lower EL, AArch32 0x200 0x400 0x600 Synchronous IRQ/vIRQ FIQ/vFIQ SError/vSError Synchronous IRQ/vIRQ FIQ/vFIQ SError/vSError Synchronous IRQ/vIRQ FIQ/vFIQ SError/vSError Synchronous IRQ/vIRQ FIQ/vFIQ SError/vSError (C) 2016 Jonathan Levin & Technologeeks.com - Share freely, but please cite source!
Page 1 and 2: Giving Mobile Security the Boot Jon
Page 3 and 4: morpheus@Zepyhr$ whoami ( 一点
Page 5 and 6: Boot Chains of Trust (C) 2016 Jonat
Page 7 and 8: Android Boot: The BootROM • Very
Page 9 and 10: Boot Chains of Trust Android Boot:
Page 11 and 12: Boot Chains of Trust Android Boot:
Page 13 and 14: The iOS Boot Sequence iOS Boot: The
Page 15 and 16: The iOS Boot Sequence iOS Boot: iBo
Page 17 and 18: Validating components: SHSH • Use
Page 19 and 20: Validating components: APTicket •
Page 21 and 22: iOS 10b1: Think different • Mista
Page 23 and 24: TrustZone 技 • Hardware support
Page 25 and 26: Android uses of TrustZone • Crypt
Page 27 and 28: iOS Uses of TrustZone • 32-bit: A
Page 29 and 30: Entering TrustZone (AArch32) • SM
Page 31: Exception Handling (AArch64) EL0 Ap
Page 35 and 36: Case Study: KPP 0x000 Synchronous C
Page 37 and 38: KPP: Kernel Side morpheus@zephyr (~
Page 39 and 40: KPP Weakness (patched in 9.2) • P
Page 41 and 42: iOS 10 changes morpheus@zeyphr(~/..
Page 43 and 44: Android & TrustZone keystore com.an
Page 45 and 46: Android & TrustZone: Samsung root@s
Page 47 and 48: disarm # disarm will automatically
Page 49 and 50: Linux Kernel Support • Generic Tr
Page 51 and 52: References • ARM TrustZone docume

Giving Mobile Security the Boot

Create successful ePaper yourself

Delete template?

Save as template?