[Cryptech Tech] arm

[Peter Gutmann]

=?windows-1252?Q?Joachim_Str=F6mbergson?= <joachim at secworks.se> writes:

>And that is actually one of our problems. If you look at M4-based devices 
>they often comes with a bevildering array of peripheral functions. Dual 
>CAN-interfaces, GPUs, touch screen controllers and integrated MAC/PHYs for 
>example. Very nice if one is to design an in car media system. Not as good 
>when one just wants to run general purpose code on a MCU that is as aeasilu 
>audited and trusted as possible.

Even just the basic USB interface (from 
https://wiki.cryptech.is/wiki/Hardware) is going to be problematic, look at 
e.g. Travis Goodspeed's work on attacking USB devices, Karsten Nohl et al's 
BadUSB stuff, and various disclosures about attacks at both the USB driver and 
the USB protocol level.  This DC'22 talk:

https://www.defcon.org/images/defcon-22/dc-22-presentations/Michael-Shkatov/DEFCON-22-Jesse-Michael-Mickey-Shkatov-USB-for-All!!-UPDATED.pdf

gives a good idea of what you're facing.

Peter.