so which conclave are they running, SGX or TrustZone?
May 7, 2025 at 7:21 PM
so which conclave are they running, SGX or TrustZone?
Excellent introduction guide to ARM TrustZone and embedded systems security
embeddedsecurity.io
#trustzone #infosec
embeddedsecurity.io
#trustzone #infosec
February 21, 2024 at 9:25 AM
Excellent introduction guide to ARM TrustZone and embedded systems security
embeddedsecurity.io
#trustzone #infosec
embeddedsecurity.io
#trustzone #infosec
Things linkers could do better for embedded:
- More control over where code lives in memory (like have some part of code live in RAM)
- Actual good error messages
- Aid in MPU/trustzone setup
- Actually help in multi-binary situations (like bootloader + app)
- Replace linker scripts
- More control over where code lives in memory (like have some part of code live in RAM)
- Actual good error messages
- Aid in MPU/trustzone setup
- Actually help in multi-binary situations (like bootloader + app)
- Replace linker scripts
December 20, 2025 at 12:15 PM
Things linkers could do better for embedded:
- More control over where code lives in memory (like have some part of code live in RAM)
- Actual good error messages
- Aid in MPU/trustzone setup
- Actually help in multi-binary situations (like bootloader + app)
- Replace linker scripts
- More control over where code lives in memory (like have some part of code live in RAM)
- Actual good error messages
- Aid in MPU/trustzone setup
- Actually help in multi-binary situations (like bootloader + app)
- Replace linker scripts
Wait till they learn about the existence of that pesky thing called a hypervisor/trustzone.
June 27, 2025 at 10:39 AM
Wait till they learn about the existence of that pesky thing called a hypervisor/trustzone.
I have a DJI mini 4 pro which has TrustZone 😔
September 19, 2026 at 8:48 AM
I have a DJI mini 4 pro which has TrustZone 😔
I think technically the SoC they have supports TrustZone, and by extension, it ought to support SafetyNet, but it's also old enough that the bootrom is pwnable, which means you can't trust tz as far as you can throw it (and I doubt they're using it in the first place)
May 1, 2024 at 9:09 AM
I think technically the SoC they have supports TrustZone, and by extension, it ought to support SafetyNet, but it's also old enough that the bootrom is pwnable, which means you can't trust tz as far as you can throw it (and I doubt they're using it in the first place)
This was an excellent writeup on exploiting ARM secure world (TrustZone, TEE) on Samsung devices
thalium.github.io/blog/posts/p...
#trustzone #cybersecurity
thalium.github.io/blog/posts/p...
#trustzone #cybersecurity
December 22, 2023 at 12:51 PM
This was an excellent writeup on exploiting ARM secure world (TrustZone, TEE) on Samsung devices
thalium.github.io/blog/posts/p...
#trustzone #cybersecurity
thalium.github.io/blog/posts/p...
#trustzone #cybersecurity
Showed too much interest in cybersecurity, have to read Arm TrustZone documentation now :(
October 15, 2025 at 11:06 AM
Showed too much interest in cybersecurity, have to read Arm TrustZone documentation now :(
At Insomni'hack 2025, Christian & Marcel introduced EL3XIR, a framework for fuzzing TrustZone-based TEEs. Get your ticket for 2026 now and gift a spot for those wishing more security innovations: insomnihack.ch?utm_source=b...
#InsomniHack #Cybersecurity #Infosec #INSO2026
#InsomniHack #Cybersecurity #Infosec #INSO2026
December 24, 2025 at 9:22 AM
At Insomni'hack 2025, Christian & Marcel introduced EL3XIR, a framework for fuzzing TrustZone-based TEEs. Get your ticket for 2026 now and gift a spot for those wishing more security innovations: insomnihack.ch?utm_source=b...
#InsomniHack #Cybersecurity #Infosec #INSO2026
#InsomniHack #Cybersecurity #Infosec #INSO2026
Great presentation, glitching the RPi 2350 on an unprotected path (USB VDD, they glitch protect others) to disturb reading critical OTP permission bits to mistakenly enable unsecured RISC-V cores to mess with TrustZone secured ARM cores without any limitations.
streaming.media.ccc.de/38c3/relive/...
streaming.media.ccc.de/38c3/relive/...
Relive: Hacking the RP2350 – 38C3: Illegal Instructions Streaming
Live streaming from the 38th Chaos Communication Congress
streaming.media.ccc.de
December 29, 2024 at 4:53 AM
Great presentation, glitching the RPi 2350 on an unprotected path (USB VDD, they glitch protect others) to disturb reading critical OTP permission bits to mistakenly enable unsecured RISC-V cores to mess with TrustZone secured ARM cores without any limitations.
streaming.media.ccc.de/38c3/relive/...
streaming.media.ccc.de/38c3/relive/...
"Don't trust your DRAM" -- Jacqueline Henes on attacking ARM TrustZone from userspace with memory aliasing www.usenix.org/conference/w...
August 10, 2026 at 3:31 PM
"Don't trust your DRAM" -- Jacqueline Henes on attacking ARM TrustZone from userspace with memory aliasing www.usenix.org/conference/w...
Single-stepping attack on TrustZone-M via interrupt-latency leakage (Usenix paper)
www.usenix.org/system/files...
#infosec
www.usenix.org/system/files...
#infosec
May 25, 2026 at 2:29 PM
Single-stepping attack on TrustZone-M via interrupt-latency leakage (Usenix paper)
www.usenix.org/system/files...
#infosec
www.usenix.org/system/files...
#infosec
The closest thing to a 'trustworthy' vpn i've been able to rely on is trustzone, and pretty much entirely because they operate in a grey area
June 26, 2026 at 2:48 PM
The closest thing to a 'trustworthy' vpn i've been able to rely on is trustzone, and pretty much entirely because they operate in a grey area
Threats and Limitations of an ARM Trustzone-based Rootkit Attacking the Android Binder (PDF)
repositum.tuwien.at/bitstream/20...
repositum.tuwien.at/bitstream/20...
November 15, 2024 at 2:18 AM
Threats and Limitations of an ARM Trustzone-based Rootkit Attacking the Android Binder (PDF)
repositum.tuwien.at/bitstream/20...
repositum.tuwien.at/bitstream/20...
There's a traditional hardware keystore implemented via TrustZone but decent devices Pixels or flagship Snapdragon devices have another higher latency keystore implemented via a secure element. Biometrics, etc. have gradually moved to the secure element on Pixels. TrustZone is for when perf matters.
March 9, 2025 at 2:49 AM
There's a traditional hardware keystore implemented via TrustZone but decent devices Pixels or flagship Snapdragon devices have another higher latency keystore implemented via a secure element. Biometrics, etc. have gradually moved to the secure element on Pixels. TrustZone is for when perf matters.
Pixel 6 and later use the open source Trusty OS for the Trusted Execution Environment (TrustZone) and secure core firmware.
Starting with this month's quarterly release (Android 14 QPR3), Trusty sources and baseline applets are part of the Android Open Source Project in trusty/.
Starting with this month's quarterly release (Android 14 QPR3), Trusty sources and baseline applets are part of the Android Open Source Project in trusty/.
June 15, 2024 at 6:35 PM
Pixel 6 and later use the open source Trusty OS for the Trusted Execution Environment (TrustZone) and secure core firmware.
Starting with this month's quarterly release (Android 14 QPR3), Trusty sources and baseline applets are part of the Android Open Source Project in trusty/.
Starting with this month's quarterly release (Android 14 QPR3), Trusty sources and baseline applets are part of the Android Open Source Project in trusty/.
Escalate privileges from a rooted user space (N-EL0) to the highest privilege level in the Secure World (S-EL3) (Android Xiaomi Redmi 11s) (CCC 2025)
media.ccc.de/v/39c3-not-t...
#infosec
media.ccc.de/v/39c3-not-t...
#infosec
Not To Be Trusted - A Fiasco in Android TEEs
Trusted Execution Environments (TEEs) based on ARM TrustZone form the backbone
of modern Android devices' security architecture. The wor...
media.ccc.de
January 14, 2026 at 8:11 PM
Escalate privileges from a rooted user space (N-EL0) to the highest privilege level in the Secure World (S-EL3) (Android Xiaomi Redmi 11s) (CCC 2025)
media.ccc.de/v/39c3-not-t...
#infosec
media.ccc.de/v/39c3-not-t...
#infosec
🔥 BULLISH
TEEs (Intel SGX, ARM TrustZone, AMD SEV) inject confidential compute + remote attestation into chains — confidential contracts and faster off chain execution for $ETH rollups and private DeFi.
Tradeoff: vendor trust and backdoor risk. Pair with ZK to scale
TEEs (Intel SGX, ARM TrustZone, AMD SEV) inject confidential compute + remote attestation into chains — confidential contracts and faster off chain execution for $ETH rollups and private DeFi.
Tradeoff: vendor trust and backdoor risk. Pair with ZK to scale
September 19, 2025 at 2:09 PM
🔥 BULLISH
TEEs (Intel SGX, ARM TrustZone, AMD SEV) inject confidential compute + remote attestation into chains — confidential contracts and faster off chain execution for $ETH rollups and private DeFi.
Tradeoff: vendor trust and backdoor risk. Pair with ZK to scale
TEEs (Intel SGX, ARM TrustZone, AMD SEV) inject confidential compute + remote attestation into chains — confidential contracts and faster off chain execution for $ETH rollups and private DeFi.
Tradeoff: vendor trust and backdoor risk. Pair with ZK to scale
I have substantial hope for the next generation of cameras including trustzone or similar -- the current don't have it, which is a big part of why the Z6 III C2PA implementation is Bad(tm)
October 27, 2025 at 4:46 PM
I have substantial hope for the next generation of cameras including trustzone or similar -- the current don't have it, which is a big part of why the Z6 III C2PA implementation is Bad(tm)
im lowkey impressed they managed to implement /anything/ absent trustzone
October 27, 2025 at 8:17 PM
im lowkey impressed they managed to implement /anything/ absent trustzone
Yes! As well as creating a memory safe bootloader.
The long term plan is to extend GoTEE (which currently supports ARM TrustZone and RISCV PMP) to additional Secure Enclave targets.
It’s a lot of work though 😅.
The long term plan is to extend GoTEE (which currently supports ARM TrustZone and RISCV PMP) to additional Secure Enclave targets.
It’s a lot of work though 😅.
January 6, 2025 at 3:44 PM
Yes! As well as creating a memory safe bootloader.
The long term plan is to extend GoTEE (which currently supports ARM TrustZone and RISCV PMP) to additional Secure Enclave targets.
It’s a lot of work though 😅.
The long term plan is to extend GoTEE (which currently supports ARM TrustZone and RISCV PMP) to additional Secure Enclave targets.
It’s a lot of work though 😅.
some games already require cpu fTPM implementations. trustzone is for other stuff
November 8, 2025 at 9:56 PM
some games already require cpu fTPM implementations. trustzone is for other stuff