Nullcon Goa 2018:- BootStomp: On the Security of Bootloaders in Mobile Devices

In this talk, Nilo Redini explores the security of mobile bootloaders and their critical role in maintaining the Chain of Trust during the boot process. The presentation delves into how bootloaders are designed to verify the integrity and origin of each stage, theoretically protecting against even the most sophisticated attacks. However, the session highlights the challenges faced by bootloaders as they must accept untrusted input from potentially compromised operating systems, and the implications of allowing these verification steps to be unlocked for development and customization purposes.