Vatsvagiri kubva kuNCC Group
Ngatiyeukei kuti tekinoroji yeARM TrustZone inokutendera kuti ugadzire nzvimbo dzakachengetedzwa dzehardware dzakapatsanurwa zvachose kubva kune huru sisitimu uye inomhanya pane yakaparadzana virtual processor uchishandisa yakaparadzana nyanzvi yekushandisa system. Chinangwa chikuru cheTrustZone ndechekupa kuuraya kwakasarudzika kwema processor emakiyi encryption, biometric authentication, data rekubhadhara uye rumwe ruzivo rwakavanzika. Kudyidzana neiyo huru OS kunoitwa zvisina kunanga kuburikidza neyekutumira interface. Yakavanzika encryption makiyi anochengetwa mukati me Hardware-yakasarudzika kiyi chitoro, iyo, kana yakaitwa nemazvo, inogona kudzivirira kuvuza kwavo kana iyo yepasi system ikakanganiswa.
Kusagadzikana kunokonzerwa nekukanganisika mukuitwa kweiyo elliptic curve processing algorithm, izvo zvakakonzera kuburitswa kweruzivo nezve kufambira mberi kwekugadziriswa kwedata. Vatsvagiri vakagadzira nzira yekurwisa-parutivi-chiteshi inobvumira kushandisa iripo isina kunanga kuvuza kudzoreredza zviri mukati makiyi akavanzika ari muhardware-yakasarudzika.
Chikonzero chikuru chedambudziko ndechekugovana kwezvakajairwa zvigadzirwa zvehardware uye cache yekuverenga muTrustZone uye mune huru sisitimu - kuzviparadzanisa kunoitwa pamwero wekuparadzanisa zvine musoro, asi uchishandisa zvakajairika computing units uye nematehwe ekuverenga uye ruzivo nezvebazi. kero dziri kuiswa mune yakajairika processor cache. Uchishandisa iyo Prime + Probe nzira, yakavakirwa pakuongorora shanduko yenguva yekuwana kune yakavharidzirwa ruzivo, zvinogoneka, nekutarisa kuvepo kwemamwe mapatani mucache, kutarisa kuyerera kwedata uye zviratidzo zvekuitwa kwekodhi zvine chekuita nekuverenga kwemasiginecha edhijitari mu. TrustZone ine chokwadi chepamusoro.
Nguva zhinji kugadzira siginecha yedhijitari uchishandisa makiyi eECDSA mumachipi eQualcomm inopedzwa kuita mabasa ekuwanza muloop uchishandisa yekutanga vector iyo isina kuchinjika kune yega siginicha.
Panyaya yeQualcomm, nzvimbo mbiri dzakaburitswa ruzivo rwakadaro dzakaonekwa mualgorithm yekuwanza: pakuita mabasa ekutarisa mumatafura uye mune inomisikidzwa kodhi yekudzosa data zvichienderana nekukosha kweiyo yekupedzisira mu "nonce" vector. Kunyangwe chokwadi chekuti Qualcomm kodhi ine matanho ekurwisa kubuda kweruzivo kuburikidza nevechitatu-bato nzira, yakagadziridzwa nzira yekurwisa inokutendera kuti upfuure matanho aya uye uone akati wandei mabhii e "nonce" kukosha, anokwana kudzoreredza 256-bit ECDSA makiyi.
Source: opennet.ru