http://goo.gl/C1NjP 来看看graf_chokolo放出的技术资料 HDD * ENCDEC peripheral device is used for HDD encryption/decryption 主机上有一颗ENCDEC晶片作为加解密引擎，即时对硬碟的资料进行加解密动作 * Write request is first passed to ENCDEC device for encryption. When ENCDEC device is done, it calls a callback and passes the encrypted data to the callback. The callback writes the encrypted data with ATA WriteDMAExt command to HDD. 当系统发出写入要求时，ENCDEC会将资料加密，然後回传给系统让系统透过写 入ATA WriteDMAExt 指令写入硬碟。 * When a storage device request is processed by HV, Storage Subsystem checks if cryptography is enabled for the storage device. 当存取储存装置的请求由HV发出时，控制储存装置的子系统会检查加密机制是 否启动。 * HV checks 1 byte of data owned by the storage device and when the value of this flag is not 0 then it uses encryption/decryption. HV只检查 1个位元，该位元是加密开启与否的旗标，如果是 0的话就关闭加密 机制。 * By setting this flag to 0 at runtime, encryption/decryption of storage devices can be disabled at runtime. 因此，将该旗标设成 0，就可以将硬碟加密关闭。 * We could patch lv1.self so that encryption/decryption of storage devices is disabled permanently. 同时，我们可以透过修改lv1.self档案，永远关闭加密机制（而不需要每次开 机都操作关闭的程序）。 * HDD sectors can be both decrypted and encrypted with HV calls 透过HV呼叫，也可以将硬碟的某个特定磁区加密或是解密。 UFS2 * Superblock starts at sector 0x80. UFS2档案系统的超级区块（不知道是不是这样翻）从0x80磁区开始 * At the end of the superblock structure you will find UFS2 signature 0x19540119. 超级区块末端会有UFS2档案系统的指纹0x19540119 -- ○ ____ _ _ _ _ ____ _ _ ____ _____ ____ 。 ★(_ _)( \( )( \/ )( ___)( \( )(_ _)( _ )( _ \ ｏ _)(_ ) ( \ / )__) ) ( )( )(_)( ) / ● ‧ (____)(_)\_) \/ (____)(_)\_) (__) (_____)(_)\_) ★ ｏ --

※ 发信站: 批踢踢实业坊(ptt.cc) ◆ From: 140.120.31.137 ※ 编辑: cassine 来自: 140.120.31.137 (03/21 10:50)