TrustZone is broken as implemented in most devices, and nobody was surprised. https://blog.acolyer.org/2017/09/21/clkscrew-exposing-the-perils-of-security-oblivious-energy-management/ …
Show this thread
-
That would have not addressed the attack, unless Pwr Mgmt regs again not reachable by REE. FI via CLK & VCC HW manipulation might also work.
AIUI they have environmental monitoring in their security CPU (anti-glitching etc). Also speed/per regs for main core are not relevant.
-
-
If you have dedicated countermeasures some attacks become less possible. But that is due to countermeasures, not to separate CPU design.
-
A separate CPU makes some countermeasures practical and significantly reduces the attack surface.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.