ARM TrustZone Gotchas...

Discussion in 'Switch - Hacking & Homebrew' started by Selver, Mar 19, 2017.

  1. Selver
    OP

    Selver 13,5,1,14,9,14,7,12,5,19,19

    Member
    199
    276
    Dec 22, 2015
    ARM's TrustZone helps make a solid security platform. However, it does not prevent hardware and software bugs.

    The Switch CPU may not be affected by any/all of the below... there's just not enough known about the CPU at this time to know. These are just potential areas of investigation.

    UPDATE: May be a stock NVidia Tegra X1 (Nvidia Tegra T210), per
    https://gbatemp.net/threads/confirm...tock-nvidia-tegra-x1-no-modifications.464725/ which refers to http://techinsights.com/about-techinsights/overview/blog/nintendo-switch-teardown/.
    Now, to determine the revision level

    Definitions
    Bootloader can still have bugs
    ARM Coprocessor Interface
    ARM Cortex-A57 errata
    Accelerator Coherence Port (ACP)
    Abuse of performance monitor
    Review AXI-to-APB bridge implementation
    Check if SPIDEN or SPNIDEN can be externally modified
    Abuse CP15SDISABLE process input signal by tying to ground
     
    Last edited by Selver, Mar 22, 2017 - Reason: Fixed date for Frédéric Basse reference. [credit: user Yahoo]
  2. Selver
    OP

    Selver 13,5,1,14,9,14,7,12,5,19,19

    Member
    199
    276
    Dec 22, 2015
    reserved
     
    addi33 likes this.
  3. Selver
    OP

    Selver 13,5,1,14,9,14,7,12,5,19,19

    Member
    199
    276
    Dec 22, 2015
    BTW, feel free to add to this list. Overall, it appears a solid architecture. As seen, some of the possibilities are hardware errata.

    Also, there are unconfirmed reports that the switch has something that prevents downgrade via re-flashing the NAND to a prior firmware.
     
    peteruk likes this.
  4. yahoo

    yahoo G͝B͢A͜t͞em҉p̡ R̨e͢g̷ul̨aŗ

    Member
    339
    236
    Aug 4, 2014
    United States
    That date has yet to happen :)
     
  5. Selver
    OP

    Selver 13,5,1,14,9,14,7,12,5,19,19

    Member
    199
    276
    Dec 22, 2015
    Thanks, fixed. :)
     
  6. bennyman123abc

    bennyman123abc Master of the Script Kiddies

    Member
    542
    210
    Mar 21, 2013
    United States
    Training some more Script Kiddies
    Could you link to one or more of these reports?