Reversing a Fingerprint Reader Protocol (2021)(blog.th0m.as) |
Reversing a Fingerprint Reader Protocol (2021)(blog.th0m.as) |
I did a talk about it here: https://www.youtube.com/watch?v=IyjUY-xvFw4
IIRC, none of them do it particularly securely.
Most recently did some work on BitLocker: https://news.ycombinator.com/item?id=42747877
Wow, i expect them using hardcoded PSK, with PSK is flashed in factory.
That's cool the raw data image GIMP
EDIT: You have the code in the repo. https://github.com/tlambertz/goodix-fingerprint-reversing/bl...
On Android, there are different levels of biometrics: https://source.android.com/docs/security/features/biometric If your fingerprint scanner reports Class 3/STRONG, hardware key stores are a requirement. Anything Class 2/WEAK or higher is supposed to make sure a kernel compromise cannot leak keys/authenticate to the OS. If it's Class 1/CONVENIENCE, simply running the biometrics in the trusted execution environment (think "secure VM acting as TPM") is also permitted.
On iOS the TPM/secure element deals with credentials, they're not submitted to the CPU.
If someone gets a hand on anything you touched, they have your fingerprint. Last time you traveled to another country - did you have to give them fingerprints? Is the software running your phone closed source? Could you ambush me at night near my house and forcefully take them?
All I am saying is they are so weak as a secret that rhey should not be regarded as one.