From 25 million instructions to one faulty skip: AI-driven fault analysis of a secure boot
- In part 1, we argued that the walls around firmware analysis are coming down when an AI agent drives the right instruments: esFirmware to run, trace and fault firmware, and Epoch to turn an execution into a time-travel trace.
- This post opens the case behind that claim.
- The target is the boot ROM of a widely deployed ARM-based router SoC.
Unverified
- In part 1, we argued that the walls around firmware analysis are coming down when an AI agent drives the right instruments: esFirmware to run, trace and fault firmware, and Epoch to turn an execution into a time-travel trace.
- This post opens the case behind that claim.
- The target is the boot ROM of a widely deployed ARM-based router SoC.
Sources: Eshard