4 ms·

Kind of interesting contrast to their advertising: https://community.hpe.com/t5/Alliances/Protect-from-attacks-with-HPE-Gen10-s-Silicon-Root-of-Trust/ba-p/69933

Kind of interesting contrast to their advertising: https://community.hpe.com/t5/Alliances/Protect-from-attacks-with-HPE-Gen10-s-Silicon-Root-of-Trust/ba-p/6993347 https://community.hpe.com/t5/Alliances/Protect-from-attacks-... Quote: The iLO5 chipset provides an unprecedented level of hardware security with its silicon root of trust. The silicon root of trust: - Is based in the silicon chip hardware itself - Is virtually impossible to alter - Enables firmware to be authenticated as far back as the supply chain - Provides a secure startup process I've spent a lot of time trying to RE the firmware for these devices but never got past the encryption. Someone obviously has, very interesting to see what comes out in this space in future.

wmf 5y ago
iLO 5 has several vulns: https://www.blackhat.com/us-21/briefings/schedule/index.html#hpe-ilo-firmware-security---go-home-cryptoprocessor-youre-drunk-23398 https://www.blackhat.com/us-21/briefings/schedule/index.html...
exikyut 5y ago
SecureROM in the iPhone 6 didn't properly configure the MMU before initialising the NAND, so it turned out to be possible to interpose between the NVME controller and main CPU (which had just started using PCI-e fabric for I/O, IIUC), take advantage of a bunch of software pieces that happened to be sitting in all the right places, and have fun with DMA bus mastering :3 http://ramtin-amin.fr/#nvmepcie http://ramtin-amin.fr/#nvmepcie http://ramtin-amin.fr/#nvmedma http://ramtin-amin.fr/#nvmedma Remains one of my favourite hacks, mostly because I can say I can (barely) actually understand it :D I mention this because, if Apple can't get PCI-e right on the first go, ...
exikyut 5y ago
(FWIW: The Blackhat link elsewhere in the thread clarifies that the root-of-trust feature is new in Gen10/ILO5. I don't know a good source to cite, but it sounds plausible that ILO<=4 might not use 202x-vintage secure boot. Not that that changes much, given that the talk is about breaking the latest generation...)
stefan_ 5y ago
It's like consoles, you can spend many many hours setting up your ultra-secure code signing boot procedure but what good is any of that if you use it to sign firmware with an ancient WebKit version that allows code execution? Same thing that happened here, the code signing works fine but it was used to sign code with trivial format vulnerabilities running in an environment (RTOS) that doesn't support any sort of isolation.
zibzab 5y ago
> The iLO5 chipset provides an unprecedented level of hardware security with its silicon root of trust. The silicon root of trust: - Is based in the silicon chip hardware itself - Is virtually impossible to alter This is pretty much standard today (and has been for some years). See ARM security model and Trusted Firmware design documents.
- wmf 5y ago
  It's really not. Most servers have AST2400 or AST2500 with no secure boot.

wmf 5y ago

iLO 5 has several vulns: https://www.blackhat.com/us-21/briefings/schedule/index.html#hpe-ilo-firmware-security---go-home-cryptoprocessor-youre-drunk-23398 https://www.blackhat.com/us-21/briefings/schedule/index.html...

exikyut 5y ago

SecureROM in the iPhone 6 didn't properly configure the MMU before initialising the NAND, so it turned out to be possible to interpose between the NVME controller and main CPU (which had just started using PCI-e fabric for I/O, IIUC), take advantage of a bunch of software pieces that happened to be sitting in all the right places, and have fun with DMA bus mastering :3 http://ramtin-amin.fr/#nvmepcie http://ramtin-amin.fr/#nvmepcie http://ramtin-amin.fr/#nvmedma http://ramtin-amin.fr/#nvmedma Remains one of my favourite hacks, mostly because I can say I can (barely) actually understand it :D I mention this because, if Apple can't get PCI-e right on the first go, ...

exikyut 5y ago

(FWIW: The Blackhat link elsewhere in the thread clarifies that the root-of-trust feature is new in Gen10/ILO5. I don't know a good source to cite, but it sounds plausible that ILO<=4 might not use 202x-vintage secure boot. Not that that changes much, given that the talk is about breaking the latest generation...)

stefan_ 5y ago

It's like consoles, you can spend many many hours setting up your ultra-secure code signing boot procedure but what good is any of that if you use it to sign firmware with an ancient WebKit version that allows code execution? Same thing that happened here, the code signing works fine but it was used to sign code with trivial format vulnerabilities running in an environment (RTOS) that doesn't support any sort of isolation.

zibzab 5y ago

> The iLO5 chipset provides an unprecedented level of hardware security with its silicon root of trust. The silicon root of trust: - Is based in the silicon chip hardware itself - Is virtually impossible to alter This is pretty much standard today (and has been for some years). See ARM security model and Trusted Firmware design documents.

wmf 5y ago
It's really not. Most servers have AST2400 or AST2500 with no secure boot.