3 ms·
> specialized solutions are needed that provide protection even after the code was extracted. Anybody know what solutions they are hinting at here? Obfuscating
by Zamiel_Snawley 3y ago
> specialized solutions are needed that provide protection even after the code was extracted.
Anybody know what solutions they are hinting at here? Obfuscating binaries? Some kind of encrypted flash with on-the-fly decryption(but the decryption key would be protected by the same inadequate ROP)?
Neither of these seem effective nor practical.
- rft 3y agoWithout going into details, we can make the extracted binary hard to analyze via, e.g., obfuscation or other methods. You are correct, just using a decryption key in ROM without other countermeasures does not provide much security as it can also be read with the same method. You need to assume the entire flash image is known and built from there. As you said, traditional code obfuscation is not practical on these small devices, but this is exactly the problem we wanted to tackle!
- ImPostingOnHN 3y agocan you go into details, please?
- Zamiel_Snawley 3y agoThanks for the reply! I'd love to read more about your obfuscation techniques, I was under the impression that obfuscation is largely ineffective.