4 ms·

This breaks the security model of all affected devices using this chip. Including all iPhones sold today. Bye bye secure enclave. Bye bye full disk encryption.

dogma1138 10y ago
No it doesn't, the secure enclave is a separate chip, it doesn't uses ARM trustzone, infact AFAIK Apple never implemented trustzone in any of their SOC's. Considering the previous publications by this author the issue is most likely within the TZ Kernel that QM uses not in the hardware itself, previous vulnerabilities that were disclosed by the same guy/gal/singular or plural sentient entity were patched.
- tlrobinson 10y ago
  To be clear, Secure Enclave is a coprocessor on Apple's A7 and later SoCs, it's not a physically separate chip from the main processor. But you are correct it's different from TrustZone.
  - dogma1138 10y ago
    Thanks for the correction, I've read that it was a separate die but you are correct it's in the same package.
    - cnvogel 10y ago
      Just picking some nits..., but being on a separate die still can mean that it's in the same package. https://www.google.de/search?q=multi+chip+package&tbm=isch https://www.google.de/search?q=multi+chip+package&tbm=isch
  - deleted 10y ago
    [deleted]
  - lstamour 10y ago
    Early, iOS 7-era articles on the ARM chips used in the 5S imply Apple based their work on TrustZone, do we have any citations to definitively say either way? I suppose all this speculation will have to wait until more details are released or discovered.
NEDM64 10y ago
More like bye bye Android Pay, didn't take much for the weakest link to break.
- kuschku 10y ago
  I’ve said this before (and got heavily downvoted) that the concept of Android Pay is stupid anyway. Even worse than their version that works with a hardware secure enclave is the version which works without one. How does that one work? By ensuring that the user didn’t modify the OS image. That’s literally all security there is. It’d be a lot better if they’d just build a security model that doesn’t have to rely on the device being secure, but instead rely on the banks’ servers being secure.
  - kennydude 10y ago
    You can thank your bank for this :)
    - kuschku 10y ago
      Well, my bank certainly has no involvement in this, and the banks I own shares of neither. I can thank some US banks that I, as German Android user, get locked down by Google. I get all the issues, none of the benefits.
unlinker 10y ago
iPhones do not use Qualcomm chipsets, so you're wrong.
- jsjohnst 10y ago
  Depends on your definition of chipsets, but iPhones do use a significant amount of Qualcomm chips. One source of many: https://www.ifixit.com/Teardown/iPhone+6s+Teardown/48170 https://www.ifixit.com/Teardown/iPhone+6s+Teardown/48170

dogma1138 10y ago

No it doesn't, the secure enclave is a separate chip, it doesn't uses ARM trustzone, infact AFAIK Apple never implemented trustzone in any of their SOC's. Considering the previous publications by this author the issue is most likely within the TZ Kernel that QM uses not in the hardware itself, previous vulnerabilities that were disclosed by the same guy/gal/singular or plural sentient entity were patched.

tlrobinson 10y ago
To be clear, Secure Enclave is a coprocessor on Apple's A7 and later SoCs, it's not a physically separate chip from the main processor. But you are correct it's different from TrustZone.
- dogma1138 10y ago
  Thanks for the correction, I've read that it was a separate die but you are correct it's in the same package.
  - cnvogel 10y ago
    Just picking some nits..., but being on a separate die still can mean that it's in the same package. https://www.google.de/search?q=multi+chip+package&tbm=isch https://www.google.de/search?q=multi+chip+package&tbm=isch
- deleted 10y ago
  [deleted]
- lstamour 10y ago
  Early, iOS 7-era articles on the ARM chips used in the 5S imply Apple based their work on TrustZone, do we have any citations to definitively say either way? I suppose all this speculation will have to wait until more details are released or discovered.

NEDM64 10y ago

More like bye bye Android Pay, didn't take much for the weakest link to break.

kuschku 10y ago
I’ve said this before (and got heavily downvoted) that the concept of Android Pay is stupid anyway. Even worse than their version that works with a hardware secure enclave is the version which works without one. How does that one work? By ensuring that the user didn’t modify the OS image. That’s literally all security there is. It’d be a lot better if they’d just build a security model that doesn’t have to rely on the device being secure, but instead rely on the banks’ servers being secure.
- kennydude 10y ago
  You can thank your bank for this :)
  - kuschku 10y ago
    Well, my bank certainly has no involvement in this, and the banks I own shares of neither. I can thank some US banks that I, as German Android user, get locked down by Google. I get all the issues, none of the benefits.

unlinker 10y ago

iPhones do not use Qualcomm chipsets, so you're wrong.

jsjohnst 10y ago
Depends on your definition of chipsets, but iPhones do use a significant amount of Qualcomm chips. One source of many: https://www.ifixit.com/Teardown/iPhone+6s+Teardown/48170 https://www.ifixit.com/Teardown/iPhone+6s+Teardown/48170