باز کردن قفل گوشی‌های هوشمند با Brute-Force اثر انگشت توسط حمله جدید BrutePrint

??? ?????? ?? BrutePrint ??? ????? ???????????? ?? ?? ???? ?????? ?? ???????? ????? ???? ???????? ?????? ?? ??????? ?? ?? ?????????? ??? ??? ?? ?????? ????? ???? ??? ????? ???????? ?????? (SFA) ????? ??? ???? ??? ??????.

??? ??????? Cancel-After-Match-Fail (CAMF) ? Match-After-Lock (MAL)? ??????? ????? ?? ?????? ????? ???? ?? ????????? ???? ??????? ?? ?? ???? ?????? ?????? ?? ???????? ??? ????? ?? Serial Peripheral Interface ?? SPI ??????? ??? ????? ????? ??????.

?????? Yu Chen ? Yiling H ?? ?? ????? ???????? ?? ??? ???? ????? ?? ????? ?? “?????? ?????????? ???? ????? ????? ??? ????? (MitM) ???? ????? ????? ??? ????? ???. BrutePrint ???????? ?? ????? ??? ???? ??? ????? ? TEE [???? ????? ??????????] ??? ??????.”

???? ?? ???? ??? ??? ?? ??????? ????? ???????? ?? ????? ????? ??? ????? ?? ?? ????? ?? ?????? ???? ????? ????? ????? ????. ?????????? ??? ??????? ?? ???? ??????? ?? ?? ???? ????? ?? ??? ?????? ??? ??????? ?? ?? ?????? ????? ????.

????? ?? ???? ???? ???? ?? ??????????? ??? ????? ? ?? ?????????? ???? ?? ??? ??????????? ? ?? ???? ?????? ????? ???? ?? ???????? ???????? ????? ??? ???? ???? ??? ????? ?? ????? ?? ???? ?? ?? ????? ???? ?? ?? ???? ????? ???.

????? ???? ?? ?? ?????????? ?? ??? ???? ?? ???? ??????? CAMF ??? ?? ????? ?????? ?????????? ???? ???? ????? ?? ?? ????????? ???? checksum ???????? ??? ????? ????? ?????? ? ?? ????? ???????? ???????? ?? ?? ????? ??????.

?? ??? ????? MAL ?? ?? ????? ????? ???? ??????? ?????? ??? ????? ??? ?????????? ??????? ?????????? ??????? ??? ????? ?? ?? ?? ???????? ???? ???? ???? ?? ????? ???? ???? ??? ??? ??????.

?????? ?? ??? ???? ????? ?????: «????? ???? ??? ????? ?? Keyguard ???? ???????????? ??? ???? ??? ????? ??????? ??? ????? ????? ???? ???? TEE ????? ??? ???».

“??????????? ????? ????? ???? ??????????? ???????? ?? ?? ?????? ?? ????? ????? ????????? ??????? ???? ??? ????? ????? ????? ????? ?? ?? ????????? ????? ???? ???? ? ????? ?????? ??????????? ??????? ????.”

?? ?? ?????????? ???????? BrutePrint ?? ????? ?? ??? ????? ???? ?????? ?? Apple? Huawei? OnePlus? OPPO? Samsung? Xiaomi ? vivo ???? ??????? ???? ???? ?? ???????? ????????? ?? ?? Android ? HarmonyOS ? ?? ???? ????? ?? ?????????? iOS ????? ???.

??? ???????? ?? ?????? ?? ??? ??? ?? ????? ?? ?????????? ?? ????? ????? ?????? ?? ??? ????? ?? ?? ????? ??????? ??? ???? ???? ????????????? ??????? ???? ????? ? ??? ?? ????????? ??? ????????? ???? (SoCs) ? ???????????? ??????? ???? «???? ????????? ????? ?? ?????? ? ????? ????????» ???? ???? ??? ? ?????? ???? ???? ??????.

??? ???? ?? Hot Pixels ??? ????? ?? ??? ????? ???? ??? ????? ??? ????? ??????? ? ??????? ?? ?? ???? ??????? ???? ???????? ??????? ???? ????? ??????? ??????.

??? ??? ?? ????? ?? ????? SVG ???????? ????? ?????? ?? ??????? ????? ?? ?? ??????????? ???? ???? ??? ??? ? ??????? ?? ?? ??? ?? ???? ???????? ???.

??? ?????? ???? ???? ????? AMD? ?????? ???????? ??????? ????? ??? ???. ?????? ?????? ????? ??????? ?? ?? ????? ???????? SVG ??? ?????????? ?? ??????? ? ?? ?????? ??????? ?? ?????? ?????? ??????? ???.

BrutePrint ? Hot Pixels ?????? ??? ?? ??? ?????? ???? ???? ?? ???????? ????? ?????? ????? (TDX) ?? ????? ??????? ?? ???????? ???? ?? ????? ?? ??????? ????? ????? ????? ? ?????????? ???????? ???.

?? ?? ??????? ?????? ???????????? ????? ??? ????? ???? ????? ????? ????? ?? ?? ??????? ???? ???? ???? ?? ????? ?????? EFLAGS ?? ??? ????? ???? ???? ???????? ??????? ???? ???? ?? ????? ????? ??????? ???????.

?????

[?] https://arxiv.org/abs/2305.10791

[?] https://thehackernews.com/2022/08/xiaomi-phones-with-mediatek-chips-found.html

[?] https://en.wikipedia.org/wiki/Checksum

[?] https://en.wikipedia.org/wiki/HarmonyOS

[?] https://arxiv.org/abs/2305.12784

[?] https://googleprojectzero.blogspot.com/2023/04/technical-report-into-intel-tdx.html

[?] https://cloud.google.com/blog/products/identity-security/rsa-google-intel-confidential-computing-more-secure

[?] https://community.intel.com/t5/Blogs/Products-and-Solutions/Security/Intel-Google-TDX-Security-Review/post/1471177

[?] https://www.intel.com/content/www/us/en/developer/articles/technical/intel-trust-domain-extensions.html

[??] https://arxiv.org/abs/2304.10877

[??] https://en.wikipedia.org/wiki/FLAGS_register

[??] https://thehackernews.com/2022/07/new-retbleed-speculative-execution.html

[??] https://thehackernews.com/2023/05/new-bruteprint-attack-lets-attackers.html