Comments on: No TPM on the iPhone, official! http://blogoftrust.com/no-tpm-on-the-iphone-official/120 Watching the trusted computing world Sat, 21 May 2011 18:45:24 +0000 hourly 1 http://wordpress.org/?v=3.2.1 By: tj http://blogoftrust.com/no-tpm-on-the-iphone-official/120/comment-page-1#comment-10372 tj Tue, 20 Oct 2009 09:55:54 +0000 http://blogoftrust.com/no-tpm-on-the-iphone-official/120#comment-10372 There where a couple errors in my above comment. I was in a hurry, sorry. The ipod touch 3G is the one with the newer Cortex A8 chip that has ARM TrustZone partially implemented. The others didn't. iPhone Dev Team last I heard have made no progress. There where a couple errors in my above comment. I was in a hurry, sorry.

The ipod touch 3G is the one with the newer Cortex A8 chip that has ARM TrustZone partially implemented. The others didn’t. iPhone Dev Team last I heard have made no progress.

]]> By: tj http://blogoftrust.com/no-tpm-on-the-iphone-official/120/comment-page-1#comment-10362 tj Tue, 20 Oct 2009 00:28:28 +0000 http://blogoftrust.com/no-tpm-on-the-iphone-official/120#comment-10362 Just an update since this is high on the Google index, for reference. The 3GS with 3.1 doesn't use TrustZone either, but the ipod touch 2G with the Cortex A8 is using it in some context. The ihpone dev team haven't made any advances with it yet. If you can't execute instructions inside a logical partition and the partition management is transistor logic, there is no hacking going to be done unless you can get into the TrustZone. LPAR schemes have never failed in the security industry. They require side channel attacks like DMA manipulation. IBM pioneered it and now other vendors are catching on to the usefulness of hardware enforced out of context instruction and memory handling. Sorry for beating a dead horse, but this is one of the only direct reference to it on the net outside product literature from what I see. The iphone attacks where the results of memory corruption, and logical partition was in place to prevent escalation. I've done work with TI OMAP cores and PPC, most vendors don't even attempt to use TrustZone. Just an update since this is high on the Google index, for reference.

The 3GS with 3.1 doesn’t use TrustZone either, but the ipod touch 2G with the Cortex A8 is using it in some context. The ihpone dev team haven’t made any advances with it yet.

If you can’t execute instructions inside a logical partition and the partition management is transistor logic, there is no hacking going to be done unless you can get into the TrustZone.

LPAR schemes have never failed in the security industry. They require side channel attacks like DMA manipulation. IBM pioneered it and now other vendors are catching on to the usefulness of hardware enforced out of context instruction and memory handling.

Sorry for beating a dead horse, but this is one of the only direct reference to it on the net outside product literature from what I see. The iphone attacks where the results of memory corruption, and logical partition was in place to prevent escalation. I’ve done work with TI OMAP cores and PPC, most vendors don’t even attempt to use TrustZone.

]]>