Reverse Engineering the Customized Pointer Authentication Hardware Implementation on Apple M1

Since 2018, Apple has deployed PA on all Apple-silicon-based products to improve the security of the system. There have been many incredible security researchers who have conducted in-depth analyses of the PA protection deployed by Apple. Notably, in the 2019 analysis blog "Examining Pointer Authentication on the iPhone XS" by Brandon Azad from Project Zero, he discovered that Apple uses some unknown "dark magic" on the PA hardware. So the customized PA on Apple Silicon can defend against cross-EL/Key attacks …

analysis apple authentication blog engineering hardware implementation iphone products protection researchers reverse reverse engineering security security researchers silicon system