seb4nihel has quit [Ping timeout: 480 seconds]
chadmed has joined #asahi-re
chadmed has quit [Quit: Konversation terminated!]
chadmed has joined #asahi-re
chadmed has quit []
chadmed has joined #asahi-re
chadmed has quit []
chadmed has joined #asahi-re
chadmed has quit [Quit: Konversation terminated!]
chadmed has joined #asahi-re
SSJ_GZ has joined #asahi-re
bluetail has joined #asahi-re
chadmed has quit [Quit: Konversation terminated!]
chadmed has joined #asahi-re
chadmed has quit [Quit: Konversation terminated!]
duban6 has joined #asahi-re
chip_x has joined #asahi-re
chipxxx has quit [Ping timeout: 480 seconds]
gyronaut has joined #asahi-re
gyronaut has quit []
thepigguy has quit [Quit: thepigguy]
seb4nihel has joined #asahi-re
chadmed has joined #asahi-re
chadmed has quit [Quit: Konversation terminated!]
chadmed has joined #asahi-re
chadmed has quit [Quit: Konversation terminated!]
chadmed has joined #asahi-re
chadmed has quit [Quit: Konversation terminated!]
chadmed has joined #asahi-re
chadmed has quit [Quit: Konversation terminated!]
chadmed has joined #asahi-re
Core2080 has joined #asahi-re
adryzz has quit [Ping timeout: 480 seconds]
Core9066 has joined #asahi-re
chadmed has quit [Quit: Konversation terminated!]
chadmed has joined #asahi-re
chadmed has quit []
chadmed has joined #asahi-re
chadmed has quit []
chadmed has joined #asahi-re
chadmed has quit []
chadmed has joined #asahi-re
chadmed has quit []
amarioguy has quit [Quit: Leaving]
amarioguy has joined #asahi-re
adryzz has joined #asahi-re
Core2080 has quit [Read error: Connection reset by peer]
q3k has joined #asahi-re
<
amarioguy>
sven: maybe want to drop that gigalocker stuff?
<
sven>
hm... can't find the code anymore
<
sven>
0x00 - 0x01: always zero
<
sven>
0x12 - 0x16: length
<
sven>
0x01 - 0x12: UUID
<
sven>
0x16 - 0x1a: CRC
<
sven>
0x1a - 0x22: unknown
<
sven>
0x22 - end: data
<
sven>
^-- that should be a single entry in the file
<
sven>
max payload size is 0x9000
<
sven>
max payload size is 0x8000 and each header+payload is padded to 0x9000
<
sven>
and the last 0x6000 bytes of the file are padding
<
sven>
the file always contains 170 entries
<
sven>
and it's essentially a key-value store that SEP updates
<
sven>
amarioguy: ^--
<
sven>
and the crc is CRC-32/ISO-HDLC
amarioguy has quit [Ping timeout: 480 seconds]
amarioguy has joined #asahi-re
<
amarioguy>
sven: thanks! for UUID is that the UUID of the request being sent over the ASC mailbox?
<
sven>
yeah. the UUID is just the key
<
amarioguy>
or is that just a random UUID generated per req
<
sven>
gigalocker is literally a rather simple key-value store for SEP
<
sven>
and SEP will send requests like get(UUID), set(UUID, payload), delete(UUID)
<
amarioguy>
ah that makes sense
<
sven>
it's more or less explained in that apple security whitepaper iirc
<
amarioguy>
yea i should give that a look over again
<
amarioguy>
btw i've had the idea of MMIO tracing using that dev kernelcache that apple accidentally sent out in the 12.3.1 IPSW
<
sven>
not sure how that would help really
<
amarioguy>
at minimum the sep key store driver might be more verbose?
<
sven>
it's already pretty verbose
<
amarioguy>
oh i see - probably just gonna stick to release
<
amarioguy>
still i can run strings on both dev/release applesepkeystore to see if there's a major difference?
<
amarioguy>
though idk if strings runs afoul of the "binary RE" clean-room rq
<
amarioguy>
requirement*
<
amarioguy>
so idk if you want to run it yourself or smth
<
amarioguy>
but probably will stick to release tracing ngl if it's not that different it's probably just better
<
sven>
i'd certainly start there
<
sven>
at first you'll have to figure out the xart endpoint anyway
<
sven>
that's the one that uses the gigalocker file and if you don't reply to its requests the key store won't even appear
<
sven>
and it should be relatively simple
<
amarioguy>
ah gotcha, "xarm" isn't the endpoint for that?
<
amarioguy>
(that was an endpoint name that popped up in the tracer)
<
sven>
i through it was xart, but dunno
<
sven>
it's been a while
<
amarioguy>
alright i'll verify that when i can
<
amarioguy>
just to clarify, does running strings count as "binary RE" in the context of this project
<
amarioguy>
i realize it may sound dumb but erring on the side of caution really
<
amarioguy>
don't want to taint myself or anything
<
amarioguy>
(though to be fair i can always just contribute to docs and have someone else write the driver for safety anyways)
<
amarioguy>
(though that is a bit lame :P, still w/e would be best for the project)
<
sven>
most of sep will be a userspace daemon fwiw
<
sven>
the kernel driver is probably just going to expose a few ioctls to talk to the various endpoints
<
amarioguy>
ah that makes sense
amarioguy has quit [Ping timeout: 480 seconds]
seb4nihel has quit [Ping timeout: 480 seconds]
amarioguy has joined #asahi-re
amateurece has joined #asahi-re
amarioguy has quit [Ping timeout: 480 seconds]
amateurece has left #asahi-re [#asahi-re]
amarioguy has joined #asahi-re
amarioguy has quit [Ping timeout: 480 seconds]
amarioguy has joined #asahi-re
amarioguy has quit [Ping timeout: 480 seconds]
seb4nihel has joined #asahi-re
amarioguy has joined #asahi-re
compassion has quit [Read error: No route to host]
compassion has joined #asahi-re
compassion has quit [Read error: No route to host]
compassion has joined #asahi-re
compassion9 has joined #asahi-re
compassion has quit [Ping timeout: 480 seconds]
compassion9 is now known as compassion
spok has joined #asahi-re
spok has left #asahi-re [#asahi-re]
compassion3 has joined #asahi-re
compassion has quit [Ping timeout: 480 seconds]
compassion3 is now known as compassion
opticron has quit [Ping timeout: 480 seconds]
chipxxx has joined #asahi-re
amarioguy has quit [Ping timeout: 480 seconds]
SSJ_GZ has quit [Ping timeout: 480 seconds]
seb4nihel has quit [Quit: Leaving]
amarioguy has joined #asahi-re
opticron has joined #asahi-re
yrlf has joined #asahi-re
jakebot6022 has joined #asahi-re
Dcow has joined #asahi-re
Dcow has quit [Remote host closed the connection]
pthariensflame has joined #asahi-re
pthariensflame has quit []
pthariensflame has joined #asahi-re
pthariensflame has quit []