Reverse Engineering
Firmware Reverse Engineering
We analyze a device's firmware to identify its authentication, update checks and key usage.
What it is
Firmware reverse engineering analyzes device software in compiled form. It determines how the device performs authentication, update checks and key usage. Undocumented services and hidden functions are identified. This analysis forms the basis for hardware security and vulnerability research.
Scope
- Extracting and analyzing the firmware
- Reviewing authentication and authorization mechanisms
- Analyzing update verification logic
- Tracing key and certificate usage
- Identifying undocumented services and hidden commands
The need
When organizations need it
- When a device's security logic is undocumented and must be understood.
- When you need to determine what an out-of-support device actually does.
- When you need to identify the root cause of a vulnerability within the firmware.
Method
How we work
-
Extract
We extract the firmware from the device or an update package and unpack it.
-
Analyze
We trace authentication, update checks and key usage within the code.
-
Report
We document the device's security logic and undocumented functions.
Outcome
What you have at the end
A documented map of the device firmware's security logic, including authentication, update checks and key usage.
Frequently asked questions
How does this differ from the hardware security service?
The hardware security assessment considers the product as a whole. Firmware reverse engineering answers in depth what is inside the software.
Can you analyze encrypted firmware?
In most cases we can obtain the firmware from the device or its boot process. If encryption is present, we report how and with what effort it was overcome.
Reverse Engineering
Other services in this area
Let's talk about this service.
Tell us briefly what you need. We will agree on the scope and timing together in the first meeting.
Schedule a Meeting