Reverse Engineering Samsung's Exynos Hypervisor: H-Arx's Modular Design and Rust Integration
This article delves into the reverse engineering analysis of Samsung's virtualization-based security platform, H-Arx, found in Exynos mobile processors. H-Arx boasts a modular design, comprising a core component (harx.bin) and loadable plugins (like uh.bin), with parts written in Rust. The analysis details H-Arx's loading process, plugin loading mechanism, and core-plugin communication, revealing how it uses Hypervisor Calls (HVCs) and Secure Monitor Calls (SMCs) for inter-privilege level communication. Key security features like Real-time Kernel Protection (RKP), Kernel Data Protection (KDP), and Hypervisor Device Manager (HDM) are also explored, along with their roles within the H-Arx architecture. This reverse engineering provides valuable insights into Samsung's Exynos security mechanisms.