Exploiting RPMB authentication in a closed source TEE implementation

ePrint Report: Exploiting RPMB authentication in a closed source TEE implementation

Aya Fukami, Richard Buurke, Zeno Geradts

Embedded Multimedia Cards (eMMCs) provide a protected memory area called the Replay Protected Memory Block (RPMB). eMMCs are commonly used as storage media in modern smartphones. In order to protect these devices from unauthorized access, important data is stored in the RPMB area in an authenticated manner. Modification of the RPMB data requires a pre-shared authentication key. An unauthorized user cannot change the …

area authentication block called devices embedded eprint report exploiting implementation media memory multimedia order protect replay report smartphones storage unauthorized