PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Black Box Probing: a Security Analysis of Xiaomi's MJA1 Secure Chip

blog.quarkslab.com | research | #vulnerability-research | #hardware-security | #reverse-engineering | #firmware | #xiaomi | #secure-chip | #i2c
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Quarkslab's black-box analysis of Xiaomi's MJA1 secure chip: hardware identification, I2C sniffing, flash dumping, firmware reverse engineering and mapping its command protocol.
Published
Collected

Related coverage

research · eshard.com
MCUBoot Under (good) Pressure | Part 2: From the too-much to the achievable
Assessing the strength of MCUBoot against fault injection attacks thanks to simulation.
research · eshard.com
MCUBoot Under (good) Pressure | Part 1: Walk Around the Code
Software Security ### Power your investigations with esReverse ✨ Keep your data safe with private LLM. PLATFORM esReverse AI-powered Reverse Engineering TOOLS Time Travel Debugging Epoch SERVICES...
tool · github.com
gpu-unlock-ada: Linux Kernel Module Unlocking Tensor Core Limits on RTX 40-Series GPUs
Demonstrates how reverse-engineering GPU firmware handoff sequences and hardware registers can bypass artificial consumer hardware compute limits without flashing custom VBIOS, significantly accelerating local AI workloads.
research · blog.quarkslab.com
State of Post-Quantum Cryptography implementations
In this blogpost, we first review the landscape of Post-Quantum Cryptography implementations across some of the most popular cryptographic libraries. Following that, we present the results of a differential fuzzing campaign on few of the presented implementations.
research · swarm.ptsecurity.com
Slowburn: Looking through AMD Platform Configuration Blobs infrastructure
A deep dive into AMD Platform Configuration Blocks (APCB v1-v3) in motherboard SPI flash on an ASUS TUF Gaming A18, covering headers and structures via OpenSIL; started as a vulnerability write-up.
research · swarm.ptsecurity.com
Injection for an athlete
Digging into a Garmin sports watch via its Android app, a researcher found exported content providers leaking the user's email and profile ID and device data; the hunt began with firmware extraction.
Back