ARM TrustZone Gotchas...

Discussion in 'Switch - Exploits, Custom Firmwares & Soft Mods' started by Selver, Mar 19, 2017.

  1. Selver
    OP

    Selver 13,5,1,14,9,14,7,12,5,19,19

    Member
    3
    Dec 22, 2015
    ARM's TrustZone helps make a solid security platform. However, it does not prevent hardware and software bugs.

    The Switch CPU may not be affected by any/all of the below... there's just not enough known about the CPU at this time to know. These are just potential areas of investigation.

    UPDATE: May be a stock NVidia Tegra X1 (Nvidia Tegra T210), per
    https://gbatemp.net/threads/confirm...tock-nvidia-tegra-x1-no-modifications.464725/ which refers to http://techinsights.com/about-techinsights/overview/blog/nintendo-switch-teardown/.
    Now, to determine the revision level

    Definitions
    Bootloader can still have bugs
    ARM Coprocessor Interface
    ARM Cortex-A57 errata
    Accelerator Coherence Port (ACP)
    Abuse of performance monitor
    Review AXI-to-APB bridge implementation
    Check if SPIDEN or SPNIDEN can be externally modified
    Abuse CP15SDISABLE process input signal by tying to ground
     
    Last edited by Selver, Mar 22, 2017 - Reason: Fixed date for Frédéric Basse reference. [credit: user Yahoo]
  2. Selver
    OP

    Selver 13,5,1,14,9,14,7,12,5,19,19

    Member
    3
    Dec 22, 2015
    reserved
     
    adrifcastr likes this.
  3. Selver
    OP

    Selver 13,5,1,14,9,14,7,12,5,19,19

    Member
    3
    Dec 22, 2015
    BTW, feel free to add to this list. Overall, it appears a solid architecture. As seen, some of the possibilities are hardware errata.

    Also, there are unconfirmed reports that the switch has something that prevents downgrade via re-flashing the NAND to a prior firmware.
     
    peteruk likes this.
  4. yahoo

    yahoo G͝B͢A͜t͞em҉p̡ R̨e͢g̷ul̨aŗ

    Member
    4
    Aug 4, 2014
    United States
    That date has yet to happen :)
     
  5. Selver
    OP

    Selver 13,5,1,14,9,14,7,12,5,19,19

    Member
    3
    Dec 22, 2015
    Thanks, fixed. :)
     
  6. bennyman123abc

    bennyman123abc GBAtemp Advanced Fan

    Member
    6
    Mar 21, 2013
    United States
    Some City
    Could you link to one or more of these reports?
     
Loading...