PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Android Data Encryption in depth

blog.quarkslab.com | research | #android | #reverse-engineering | #exploitation | #encryption | #fbe | #trustzone
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

An in-depth study of Android data-at-rest encryption: how it works, which components attackers with high-end software vulnerabilities target, and PoCs against TrustZone Gatekeeper and Weaver.
Published
Collected

Related coverage

research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · blog.quarkslab.com
A Deep Dive Into Samsung's TrustZone (Part 3)
Part three of the Samsung TrustZone series: the vulnerabilities found in Secure World components (Kinibi trustlets) and how they were exploited to reach code execution in EL3 on Galaxy devices.
research · blog.quarkslab.com
A Deep Dive Into Samsung's TrustZone (Part 2)
Part two of the Samsung TrustZone series introduces the toolset built for the research: Ghidra/IDA loaders for MCLF and SBOOT, a trustlet communication framework, an AFL/Unicorn fuzzer and more.
research · blog.quarkslab.com
A Deep Dive Into Samsung's TrustZone (Part 1)
Part one of a three-part series touring Samsung's TrustZone implementation (with Trustonic/Kinibi): its components, how they interact, and the TEE security model on Galaxy S6-S9 devices.
research · blog.quarkslab.com
Attacking the ARM's TrustZone
Second TrustZone post: a technical view of the attack surface — monitor message handlers, trustlets and Secure Boot — and what code execution at each privilege level enables.
research · blog.quarkslab.com
Introduction to Trusted Execution Environment: ARM's TrustZone
First of two posts on hardware TEEs: introduces Trusted Execution Environments, then ARM TrustZone — Secure and Non-Secure worlds, monitor mode, and trustlet-based trusted applications.
Back