VVB2060CHANNEL Telegram 834
南宫雪珊
小米的澎湃搞了一个和 Key Attestation 有点类似的东西,不过只能看是否解锁bootloader,全程使用 json,乏善可陈。硬件层接口的包装器在 com.xiaomi.trustservice 这个app里面,没开R8混淆,接口设计一目了然。 小米没有公布验签算法和公钥,需要上传到小米服务器才能知道签名是否正确,没意思。 https://dev.mi.com/distribute/doc/details?pId=1746
没有完全反编译确认细节。小米可能不是把JSON送进TEE让TA填充 unlock_l2 字段然后签名。如果仅仅在用户空间获取解锁状态然后签名,这可以被定制系统篡改。

以这套API的其它功能(检测恶意应用和模拟触摸)判断,它不是一个严肃的安全功能。所以非常可能只是在用户空间从TEE拿了一个是否解锁的bool,比如通过 QSEECom API。



tgoop.com/vvb2060Channel/834
Create:
Last Update:

没有完全反编译确认细节。小米可能不是把JSON送进TEE让TA填充 unlock_l2 字段然后签名。如果仅仅在用户空间获取解锁状态然后签名,这可以被定制系统篡改。

以这套API的其它功能(检测恶意应用和模拟触摸)判断,它不是一个严肃的安全功能。所以非常可能只是在用户空间从TEE拿了一个是否解锁的bool,比如通过 QSEECom API。

BY 南宫雪珊


Share with your friend now:
tgoop.com/vvb2060Channel/834

View MORE
Open in Telegram


Telegram News

Date: |

Telegram Android app: Open the chats list, click the menu icon and select “New Channel.” The creator of the channel becomes its administrator by default. If you need help managing your channel, you can add more administrators from your subscriber base. You can provide each admin with limited or full rights to manage the channel. For example, you can allow an administrator to publish and edit content while withholding the right to add new subscribers. best-secure-messaging-apps-shutterstock-1892950018.jpg While the character limit is 255, try to fit into 200 characters. This way, users will be able to take in your text fast and efficiently. Reveal the essence of your channel and provide contact information. For example, you can add a bot name, link to your pricing plans, etc. fire bomb molotov November 18 Dylan Hollingsworth yau ma tei
from us


Telegram 南宫雪珊
FROM American