Reflections on Trusting TrustZone

Reflections on Trusting TrustZone

Explore the intricacies of TrustZone security in ARM devices through this Black Hat conference talk. Delve into a technical analysis of a major vendor's TrustZone kernel implementation, examining its vulnerabilities and exploitation techniques. Learn about the architecture, real-world applications, and prior work in TrustZone exploitation. Discover a previously undisclosed vulnerability, its exploitation process, and witness a live demonstration of unlocking an Android phone's bootloader. Gain insights into the implications of such vulnerabilities for mobile device security, covering topics like secure boot, DRM key storage, mobile payments, and kernel integrity validation.