---
id: 4469
title: "Analysis of Qualcomm Secure Boot Chains"
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/analysis-of-qualcomm-secure-boot-chains.html"
published_at: "2019-10-23T22:00:00Z"
tags: ["reverse-engineering", "exploitation", "qualcomm", "secure-boot", "armv8", "el3"]
phying_url: "https://phying.com/item/4469"
lang: en
---

# Analysis of Qualcomm Secure Boot Chains

## Summary

A six-month internship study of Qualcomm secure boot chains: dumping bootROM/SBL on Nexus 6P and Nokia 6, taking over the chain and hooking the secure monitor for EL3 read/write.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **Published:** 2019-10-23T22:00:00Z
- **Original:** https://blog.quarkslab.com/analysis-of-qualcomm-secure-boot-chains.html
- **Phying News:** https://phying.com/item/4469