Get the latest tech news
Reversing Samsung's H-Arx Hypervisor Framework (Part 1)
In many ways, mobile devices lead the security industry when it comes to defense-in-depth and mitigation. Over the years, it has been proven time and again that the kernel cannot be trusted to be secure. As such, there has been effort put into moving secrets (ie. encryption keys) and other sensitive data out of the kernel and gate it behind an API at higher levels in the chain of trust, whether it be the hypervisor or secure enclaves. In any case, the kernel must have a lot of control over the s
encryption keys) and other sensitive data out of the kernel and gate it behind an API at higher levels in the chain of trust, whether it be the hypervisor or secure enclaves. In the early days, RKP was a monolithic hypervisor contained in the vmm.elf file that was embedded in the kernel and shipped in source tarballs (with symbols too!). This research was pulled together while preparing material for our training focused on virtualization and security hypervisors, which we are giving this summer at Hardwear.IO USA and REcon Montreal.
Or read this on Hacker News
