Demystifying the Secure Enclave Processor
LytVKz
LytVKz
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Boot-loading: Img4<br />
• SEP uses <strong>the</strong> “IMG4” bootloader format which is<br />
based on ASN.1 DER encoding<br />
▫ Very similar to 64bit iBoot/AP Bootrom<br />
▫ Can be parsed with ”openssl -asn1parse”<br />
• Three primary objects used by SEP<br />
▫ Payload –<br />
Contains <strong>the</strong> encrypted sep-firmware<br />
▫ Restore –<br />
Contains basic information when restoring SEP<br />
▫ Manifest (aka <strong>the</strong> AP ticket) -<br />
Effectively <strong>the</strong> Alpha and <strong>the</strong> Omega of bootROM<br />
configuration (and security)