Root De La Vega & KNOX

Varsågoda

https://www.samsungknox.com/en/blog/about-root-de-la-vega


"During the Trusted Boot process, each GALAXY Note 3 collects the measurements of boot loaders and the kernel image through the TrustZone secure world. In applications with high security requirements, a remote server (e.g. an MDM or attestation server) can perform remote attestation with the target device, during which the TrustZone attestation app on the device will collect, sign, and transmit the measurements back to the server. The remote server can verify whether the vulnerable boot loaders and/or the kernel run on the target device and then make security decisions (e.g. refuse to create a KNOX Container or remove sensitive data from the device). "

Enkelt så verkar det som att trustzone kommer verifiera data mot en server?