corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0871c-e5b6-721a-b9a6-a3d7ef6da1a9

Breaking secure boot without breaking the crypto

0x434b.dev · published 19 August 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at 0x434b.dev Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
97
Words captured
15,625

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-193.pdf?ref=0x434b.dev
nvlpubs.nist.gov
https://uapi-group.org/specifications/specs/linux_tpm_pcr_registry/?ref=0x434b.dev
uapi-group.org
https://www.qualcomm.com/content/dam/qcomm-martech/dm-assets/documents/secure-boot-and-image-authentication.pdf?ref=0x434b.dev
qualcomm.com
RPMB, a secret place inside the eMMC Read at the source ↗
sergioprado.blog
https://android.googlesource.com/platform/packages/modules/Virtualization/+/refs/tags/aml_ase_351114000/docs/abl.md?ref=0x434b.dev
android.googlesource.com
https://source.android.com/docs/security/features/verifiedboot/avb?ref=0x434b.dev
source.android.com
https://android.googlesource.com/platform/external/avb/+/refs/heads/main/libavb/?ref=0x434b.dev
android.googlesource.com
https://android.googlesource.com/platform/external/avb/+/master/README.md?ref=0x434b.dev
android.googlesource.com
https://en.wikipedia.org/wiki/Qualcomm_EDL_mode?ref=0x434b.dev
en.wikipedia.org
https://github.com/bkerler/edl?ref=0x434b.dev
github.com
https://docs.kernel.org/admin-guide/device-mapper/verity.html?ref=0x434b.dev
docs.kernel.org
https://www.rfc-editor.org/rfc/rfc9334.html?ref=0x434b.dev
rfc-editor.org
https://www.rfc-editor.org/rfc/rfc9711.html?ref=0x434b.dev
rfc-editor.org
https://datatracker.ietf.org/doc/html/rfc8152?ref=0x434b.dev
datatracker.ietf.org
https://datatracker.ietf.org/doc/html/rfc8392?ref=0x434b.dev
datatracker.ietf.org
https://datatracker.ietf.org/doc/html/rfc7519?ref=0x434b.dev
datatracker.ietf.org
https://www.rfc-editor.org/rfc/rfc9783.html?ref=0x434b.dev
rfc-editor.org
https://en.wikipedia.org/wiki/Trusted_Platform_Module?ref=0x434b.dev
en.wikipedia.org
https://trustedcomputinggroup.org/wp-content/uploads/DICE-Layering-Architecture-r19_pub.pdf?ref=0x434b.dev
trustedcomputinggroup.org
https://source.android.com/docs/security/features/verifiedboot?ref=0x434b.dev
source.android.com
https://source.android.com/docs/security/features/keystore/attestation?ref=0x434b.dev
source.android.com
https://nvd.nist.gov/vuln/detail/CVE-2019-2278?ref=0x434b.dev
nvd.nist.gov
https://web.archive.org/web/20210115205021/https://source.codeaurora.org/quic/le/kernel/lk/commit/?id=8ac15b064823c01aafc4264b9b4c7b0b16d057a6
web.archive.org
https://patchew.org/EDK2/20221125222413.1745225-1-jmaloy@redhat.com/?ref=0x434b.dev
patchew.org
https://en.sdmctech.com/news/product-news_1926.html?ref=0x434b.dev
en.sdmctech.com
https://source.android.com/docs/security/bulletin/chromecast/2023-12-01?ref=0x434b.dev
source.android.com
https://oddsolutions.github.io/Chromecast-with-Google-TV-1080P-Secure-Boot-Bypass/?ref=0x434b.dev
oddsolutions.github.io
https://nvd.nist.gov/vuln/detail/CVE-2023-6181?ref=0x434b.dev
nvd.nist.gov
https://nest-open-source.googlesource.com/manifest_repos/u-boot/+/692bf42e8e2cd132fe8897e7eb7f3356c3dd496c..0bcd23696636e37fa2003af970205888fe92ae62/cmd/amlogic/cmd_avb.c?ref=0x434b.dev
nest-open-source.googlesource.com
https://github.com/CVEProject/cvelistV5/blob/main/cves/2024/7xxx/CVE-2024-7344.json?ref=0x434b.dev
github.com
https://uefi.org/specs/UEFI/2.11/07_Services_Boot_Services.html?ref=0x434b.dev
uefi.org
https://www.welivesecurity.com/en/eset-research/under-cloak-uefi-secure-boot-introducing-cve-2024-7344/?ref=0x434b.dev
welivesecurity.com
https://github.com/OP-TEE/optee_os/security/advisories/GHSA-r64m-h886-hw6g?ref=0x434b.dev
github.com
https://github.com/OP-TEE/optee_os/commit/8a697013f714256c0b15708023fd45298f95b658?ref=0x434b.dev
github.com
https://alephsecurity.com/2018/01/22/qualcomm-edl-5/?ref=0x434b.dev
alephsecurity.com
https://www.qualcomm.com/smartphones/products/4-series/snapdragon-430-mobile-platform?ref=0x434b.dev
qualcomm.com
https://nvd.nist.gov/vuln/detail/CVE-2018-20785?ref=0x434b.dev
nvd.nist.gov
https://arstechnica.com/gadgets/2016/01/neato-botvac-connected-review-a-lidar-powered-robot-vacuum-is-my-maid-now/?ref=0x434b.dev
arstechnica.com
https://www.ti.com/lit/po/sprt617e/sprt617e.pdf?ts=1787055113016&ref_url=https%253A%252F%252Fwww.google.com%252F&ref=0x434b.dev
ti.com
https://www.usenix.org/system/files/woot19-paper_ullrich.pdf?ref=0x434b.dev
usenix.org
https://www.nccgroup.com/research/shooting-yourself-in-the-flags-jailbreaking-the-sonos-era-100/?ref=0x434b.dev
nccgroup.com
https://www.sonos.com/en-us/security-advisory-2024-0001?ref=0x434b.dev
sonos.com
https://alephsecurity.com/2017/05/23/nexus6-initroot/?ref=0x434b.dev
alephsecurity.com
https://android.googlesource.com/platform/system/core/+/master/fastboot/?ref=0x434b.dev
android.googlesource.com
https://community.nxp.com/t5/i-MX-Security/U-Boot-Secondary-Program-Loader-Authentication-Vulnerability-CVE/ta-p/1736196?ref=0x434b.dev
community.nxp.com
https://docs.u-boot.org/en/stable/usage/fit/index.html?ref=0x434b.dev
docs.u-boot.org
https://docs.u-boot.org/en/latest/usage/fit/overlay-fdt-boot.html?ref=0x434b.dev
docs.u-boot.org
https://github.com/nxp-imx/uboot-imx/commit/0746cfd931de8f7591d263ff60dd806ffe23c093?ref=0x434b.dev
github.com
https://nvd.nist.gov/vuln/detail/CVE-2018-1000205?ref=0x434b.dev
nvd.nist.gov
https://github.com/u-boot/u-boot/commit/7346c1e192d63cd35f99c7e845e53c5d4d0bdc24?ref=0x434b.dev
github.com
https://www.mail-archive.com/u-boot%40lists.denx.de/msg567289.html?ref=0x434b.dev
mail-archive.com
https://nvd.nist.gov/vuln/detail/CVE-2026-46728?ref=0x434b.dev
nvd.nist.gov
https://github.com/u-boot/u-boot/commit/2092322b31cc8b1f8c9e2e238d1043ae0637b241?ref=0x434b.dev
github.com
https://github.com/mcu-tools/mcuboot/security/advisories/GHSA-m59c-q9gq-rh2j?ref=0x434b.dev
github.com
https://docs.mcuboot.com/?ref=0x434b.dev
docs.mcuboot.com
https://docs.mcuboot.com/design.html?ref=0x434b.dev
docs.mcuboot.com
https://github.com/mcu-tools/mcuboot/commit/da2e2ab4e3d77819f2c477ee8b66242d240cdb7a?ref=0x434b.dev
github.com
https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-hwpx-69hh-6g59?ref=0x434b.dev
github.com
https://android.googlesource.com/platform/external/avb/+/master/libavb/avb_slot_verify.c?ref=0x434b.dev
android.googlesource.com
https://source.android.com/docs/core/ota/virtual_ab?ref=0x434b.dev
source.android.com
https://android.googlesource.com/platform/external/avb/+/android16-qpr2-release/README.md?ref=0x434b.dev
android.googlesource.com
https://www.android-device-security.org/publications/2025-leierzopf-spices/Leierzopf_2025_SPICES_AVBTestKeyInTheWild.pdf?ref=0x434b.dev
android-device-security.org
https://android.googlesource.com/platform/external/avb/+/refs/heads/main/test/data/?ref=0x434b.dev
android.googlesource.com
https://android.googlesource.com/platform/external/avb/+/android16-qpr2-release/libavb/avb_ops.h?ref=0x434b.dev
android.googlesource.com
https://github.com/OP-TEE/optee_os/security/advisories/GHSA-fhcg-pp56-8v75?ref=0x434b.dev
github.com
https://github.com/OP-TEE/optee_os/blob/a9386bf987d95374a6f7f4c7bcf850115e0e1a4e/core/crypto/signed_hdr.c?ref=0x434b.dev
github.com
https://github.com/OP-TEE/optee_os/blob/a9386bf987d95374a6f7f4c7bcf850115e0e1a4e/core/kernel/ree_fs_ta.c?ref=0x434b.dev
github.com
https://github.com/OP-TEE/optee_os/commit/43ed01d216a9586e7e7591dff1f7fbf80923f93f?ref=0x434b.dev
github.com
https://www.eset.com/us/about/newsroom/research/eset-research-discovers-vulnerable-uefi-shims-undermining-secure-boot/?srsltid=AfmBOopJmsBo1lqUGdj3i4xl6hm9cOLHz1vEbcFoRVLgioIr_71aTkeD&ref=0x434b.dev
eset.com
https://www.binarly.io/advisories/brly-2024-005?ref=0x434b.dev
binarly.io
https://csrc.nist.gov/glossary/term/key_encryption_key?ref=0x434b.dev
csrc.nist.gov
https://www.pentestpartners.com/security-blog/breaking-the-android-bootloader-on-the-qualcomm-snapdragon-660/?ref=0x434b.dev
pentestpartners.com
https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin?ref=0x434b.dev
qualcomm.com
https://github.com/espressif/esp-idf/security/advisories/GHSA-22x6-3756-pfp8?ref=0x434b.dev
github.com
https://github.com/espressif/esp-idf/blob/v5.2.1/components/bootloader_support/src/bootloader_utility.c?ref=0x434b.dev
github.com
https://github.com/elttam/publications/blob/master/writeups/CVE-2024-28183/CVE-2024-28183.md?ref=0x434b.dev
github.com
https://github.com/espressif/esp-idf/commit/3305cb4d235182067936f8e940e6db174e25b4b2?ref=0x434b.dev
github.com
https://github.com/espressif/esp-idf/commit/c33b9e1426121ce8cccf1a94241740be9cff68de?ref=0x434b.dev
github.com
https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5001.html?ref=0x434b.dev
amd.com
https://www.onekey.com/resource/making-toctou-great-again-xrip?ref=0x434b.dev
onekey.com
https://www.espressif.com/en/news/Espressif_Product_Security_Advisory_Concerning_Secure_Boot_%28CVE-2018-18558%29?ref=0x434b.dev
espressif.com
https://bits-please.blogspot.com/2016/05/war-of-worlds-hijacking-linux-kernel.html?ref=0x434b.dev
bits-please.blogspot.com
https://arxiv.org/abs/2201.11764?ref=0x434b.dev
arxiv.org
https://www.nordicsemi.com/Products/nRF52840?ref=0x434b.dev
nordicsemi.com
https://www.qualcomm.com/media/documents/files/secure-boot-and-image-authentication-technical-overview-v2-0.pdf?ref=0x434b.dev
qualcomm.com
https://www.qualcomm.com/developer/blog/2024/12/secure-boot-as-part-of-platform-security-architecture-modern-system-on-chip?ref=0x434b.dev
qualcomm.com
https://android.googlesource.com/platform/external/avb/+/main/README.md?ref=0x434b.dev
android.googlesource.com
https://trustedcomputinggroup.org/resource/dice-attestation-architecture/?ref=0x434b.dev
trustedcomputinggroup.org
https://lists.denx.de/pipermail/u-boot/2018-June/330454.html?ref=0x434b.dev
lists.denx.de
https://lists.u-boot-project.org/pipermail/u-boot/2026-March/611623.html?ref=0x434b.dev
lists.u-boot-project.org
https://arxiv.org/abs/1707.05082?ref=0x434b.dev
arxiv.org
https://nvd.nist.gov/vuln/detail/CVE-2015-6639?ref=0x434b.dev
nvd.nist.gov
https://alephsecurity.com/2018/01/22/qualcomm-edl-2/?ref=0x434b.dev
alephsecurity.com
https://kb.cert.org/vuls/id/455367?ref=0x434b.dev
kb.cert.org
https://www.qualcomm.com/content/dam/qcomm-martech/dm-assets/documents/qpss22-christopher-wade.pdf?ref=0x434b.dev
qualcomm.com
https://donjon.ledger.com/blog/tropic01-laser-fault-injection/?ref=0x434b.dev
donjon.ledger.com
https://www.usenix.org/conference/woot24/presentation/ravi?ref=0x434b.dev
usenix.org