南宫雪珊@vvb2060Channel P.877

VVB2060CHANNEL Telegram 877

没有完全反编译确认细节。小米可能不是把JSON送进TEE让TA填充 unlock_l2 字段然后签名。如果仅仅在用户空间获取解锁状态然后签名，这可以被定制系统篡改。以这套API的其它功能（检测恶意应用和模拟触摸）判断，它不是一个严肃的安全功能。所以非常可能只是在用户空间从TEE拿了一个是否解锁的bool，比如通过 QSEECom API。

https://www.tgoop.com/qianqianzhuang/76
猜错了，小米意外地正经了一次

最近研究了小米安全开放服务客户端 SDK 的实现，意外发现小米实际上实现了一套简化版的密钥验证，囊括了从 Trust Application、AIDL HAL、客户端 API 到应用 SDK 的全流程。下面以红米 Note 12 为例，逐项拆解一下：

1）系统启动：由 init 执行 /odm/bin/mrmd，启动名为 vendor.xiaomi.hardware.mrm 的 AIDL 服务，并注册三个名为 IMrm、IMiCertificate、IMrmRemoteAuth 的接口，供客户端使用。服务的具体逻辑在…

www.tgoop.com/vvb2060Channel/877

4.2K viewsSep 8, 2024 at 09:28

tgoop.com/vvb2060Channel/877

Create: 2024-09-08
Last Update: 2025-01-17 14:30:12

https://www.tgoop.com/qianqianzhuang/76
猜错了，小米意外地正经了一次

BY 南宫雪珊

Share with your friend now:
tgoop.com/vvb2060Channel/877

Open in Telegram

Telegram News

Date: 2025-01-17|

Invite up to 200 users from your contacts to join your channel With Bitcoin down 30% in the past week, some crypto traders have taken to Telegram to “voice” their feelings. 2How to set up a Telegram channel? (A step-by-step tutorial) Telegram iOS app: In the “Chats” tab, click the new message icon in the right upper corner. Select “New Channel.” Joined by Telegram's representative in Brazil, Alan Campos, Perekopsky noted the platform was unable to cater to some of the TSE requests due to the company's operational setup. But Perekopsky added that these requests could be studied for future implementation.
from us

Telegram 南宫雪珊
FROM American