https://overkazaf.github.io/blogs/tags/tee/Recent content in TEE on +5 Security ResearchHugozh-cnSat, 09 May 2026 00:00:00 +0000https://overkazaf.github.io/blogs/posts/arm-trustzone-el0-to-el3-attack-chain-anatomy/Sat, 09 May 2026 00:00:00 +0000https://overkazaf.github.io/blogs/posts/arm-trustzone-el0-to-el3-attack-chain-anatomy/以 Quarkslab/Project Zero/360 Alpha Lab 的四条真实攻击链为案例，从 ARM 异常等级架构出发，逐层解剖 EL0→S-EL0→S-EL1→EL3 的提权技术：共享内存机制、SMC 调用约定、Trustlet 漏洞模式、TEE 内核提权、Secure Monitor 劫持，以及 Boot Chain 替代路径https://overkazaf.github.io/blogs/posts/quarkslab-drm-whitebox-cryptanalysis-arsenal/Fri, 08 May 2026 00:00:00 +0000https://overkazaf.github.io/blogs/posts/quarkslab-drm-whitebox-cryptanalysis-arsenal/系统梳理法国安全团队 Quarkslab 在白盒密码破译与 DRM 安全研究领域的十年技术演进：从 CHES 2016 最佳论文到 SideChannelMarvels 开源武器库，从 Samsung TrustZone EL3 代码执行到 DarkPhoenix/BlueGalaxyEnergy 新一代工具链