Line 14: |
Line 14: |
| | | |
| ==System flaws== | | ==System flaws== |
| + | === Hardware === |
| + | {| class="wikitable" border="1" |
| + | ! Summary |
| + | ! Description |
| + | ! Timeframe this was discovered |
| + | ! Discovered by |
| + | |- |
| + | | Missing AES key clearing |
| + | | The hardware AES engine does not clear keys when doing a hard reset/reboot. |
| + | | February 2015 |
| + | | Mathieulh |
| + | |- |
| + | | TWL keyscrambler |
| + | | The AESKEY0-3 registers are readable. This allows inspection of the normal-key when writing arbitrary keyX/keyY pairs. From there it is trivial to deduce the keyscrambler function. This attack does not work for the 3DS keyscrambler because keyslots 0-3 are only for TWL keys. |
| + | | ? |
| + | | [[User:Yellows8|Yellows8]] |
| + | |} |
| === [[TWL_FIRM]] === | | === [[TWL_FIRM]] === |
| ==== Process9 ==== | | ==== Process9 ==== |