414: Puff, the Magically Secure Dragon

Laura Abbott of Oxide Computing spoke with us about a silicon bug in the ROM of the NXP LPC55, affecting the TrustZone. 

More information about the two issues are in the Oxide blog:

• Another vulnerability in the LPC55S69 ROM

• Exploiting Undocumented Hardware Blocks in the LPC55S69 

More about LPC55S6x and their LPC55Sxx Secure Boot

Ghidra is a software reverse engineering framework… and it is one of the NSA’s github repositories.

Laura will also be speaking about this at Hardwear.io in early June 2022 in Santa Clara. 

Twitter handles: @hardwear_io, @oxidecomputer, @openlabbott,

The vulnerability was filed with NIST: NVD - CVE-2021-31532

Transcript