spispy: SPI flash device emulation (camp2019)
Open source tools for flash emulation and research
Chaos Computer Club - archive feed · Trammell Hudson
August 20, 201932m 8s
Audio is streamed directly from the publisher (cdn.media.ccc.de) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.
Show Notes
<a href="https://github.com/osresearch/spispy">spispy</a> is an open source hardware tool for emulating SPI flash chips that makes firmware development and boot security research easier. In this talk we'll discuss the challenges of interfacing on the SPI bus and emulating SPI devices, as well as demonstrate how to use it quickly debug issues with coreboot and how we used spispy to discover a critical class of TOCTOU vulnerabilities in secure boot systems like Intel BootGuard.
about this event: https://fahrplan.events.ccc.de/camp/2019/Fahrplan/events/10186.html
Topics
camp1910186Hardware & Making