ReVault! Compromised by Your Secure SoC
Demonstrates the ReVault hardware attack targeting secure microcontrollers embedded across over 100 enterprise laptop models to compromise master keys.
Summary
Trust Assumptions in Secure Microcontrollers
Modern enterprise laptops integrate dedicated security chips and secure microcontrollers to store disk encryption keys, biometric credentials, and administrative passwords.
The ReVault Hardware Attack Chain
Philippe Laulheret presents ReVault, an attack targeting proprietary security microcontrollers embedded in over 100 enterprise laptop models, demonstrating how low-privilege attackers can bypass silicon-level protections.
Extracting Sealed Secrets and Firmware Flaws
Analyzing firmware execution and physical bus interactions reveals vulnerabilities in secure boot and memory isolation, enabling unauthorized extraction of sealed cryptographic keys.
Hardware Hardening for Endpoint Silicon
Mitigating secure SoC compromises demands hardware-enforced memory encryption, authenticated firmware updates, and rigorous silicon-level vulnerability testing.
Related talks
Main Stage·55 min
Jan Berens · Marcell Szakály · Sebastian Köhler
Discloses vulnerabilities in QCA 7000 HomePlug modems used across CCS and NACS EV charging systems that enable communication hijacking and denial of service.
Main Stage·45 min
Christopher Domas
Christopher Domas demonstrates how software-controlled microarchitectural stresses induce transient hardware faults to achieve cross-ring privilege escalation.
Main Stage·21 min
Noam Moshe
Demonstrates remote code execution and edge compromise across Axis enterprise IP cameras, turning surveillance devices into offensive pivot points.