This document discusses the Nucleus OS real-time operating system. It notes that Nucleus OS is developed by Mentor Graphics, written in C, closed source, and supports platforms like ARM, MIPS, and PowerPC. It then discusses real-time operating systems and how they differ from general purpose operating systems in prioritizing guaranteed task completion times over throughput. The document outlines the architecture and components of Nucleus OS like its kernel, connectivity, storage, and security features. It provides examples of Nucleus OS usage in devices like the iPhone and digital signal processors. Finally, it summarizes the iOS hardware architecture and boot process, noting how jailbreaking works by overriding checks in the firmware to
UWB Technology for Enhanced Indoor and Outdoor Positioning in Physiological M...
from Realtime Operating systems to unlocking iPhones in less than 30 slides
1. Nucleus OS
from real-time operating systems to unlocking iPhones
in less than 30 slides
HdM Stuttgart Media University
Computer Science and Media
2010 - Kai Aras
Tuesday, December 14, 2010
2. Nucleus OS
Facts
• Real-time operating system
• developed by Mentor Graphics
• written in C
• Closed Source
• Eclipse based SDK starting at $2995 USD
• Supported Platforms: ARM / MIPS / Freescale / PowerPC
Tuesday, December 14, 2010
4. RTOS
Requires tasks to be executed within a given timeframe
Neglects throughput
Guarantees either Hard- or Soft real-time performance
Tuesday, December 14, 2010
5. RTOS
Soft Hard
Lateness is tolerated Task failes after deadline
May cause adaption of May cause critical
service quality system-failure
Tuesday, December 14, 2010
7. Designs
Event driven Time sharing
task switch only occurs on events of task switch occurs on regular clock
higher priority interrupt
Tuesday, December 14, 2010
15. Application Platform
Inflexion UI Multimedia
Window System Framework
GUI Designer support for many codecs
Hardware accelleration Hardware accelleration
Tuesday, December 14, 2010
20. iOS Hardware Architecture
Application Processor
iOS
User interaction
Applications
...
Baseband Processor
NucleusOS
Radio communication
Tuesday, December 14, 2010
21. iOS Hardware
audio
display
Architecture WIFI
BT
camera GSM
Application Processor Baseband Processor
UART
I2S
GPIO
DMA
controls
power
sim/net-lock !
managment
Tuesday, December 14, 2010
23. Boot sequence
signature signature
check check
Bootrom Bootloader Firmware
(Nucleus OS)
ROM NOR
seczone
protected area
contains:
encrypted lock-state
Tuesday, December 14, 2010
24. Unlocking
signature signature
check check 2. unlock on-the-fly
by constantly overriding netlock
checks in firmware
Bootrom Bootloader Firmware
(Nucleus OS)
ROM NOR
X
seczone
1. truly unlock
protected area by altering lock-state in seczone
contains:
encrypted lock-state
Tuesday, December 14, 2010
25. Unlocking
1. truly unlock
by altering lock-state in seczone
hasn‘t been done yet due the
tha lack of bootrom exploits
Tuesday, December 14, 2010
26. Unlocking
2. unlock on-the-fly
run deamon process on by constantly overriding netlock
application processor checks in firmware exploit code execution
* (requires jailbreak) vulnerabilities to override
netlock „on-the-fly“
unlockd
iOS Nucleus OS X seczone
NOR
UART
Application Processor Baseband Processor
Tuesday, December 14, 2010
27. Questions ?
slides and additional info on jailbreaking iOS
available at http://blog.010dev.com
Tuesday, December 14, 2010