Intel ME - Flash File System Explained

This advanced course analyzes how Intel Management Engine 11.x stores state on flash. It covers the file-system layout, pagination, data extraction, supported file-system types, integrity mechanisms, encryption, and key derivation.

Syllabus

Intro
black hat ME Position in Computer System
black hat MFS Partition Layout
black hat Flash Memory Characteristics
black hat Flash File System Design Goals
black hat Recommended Materials
black hat MFS Pagination
black hat Page Chunks Single Chunk (66 bytes)
black hat System Pages
black hat Data Pages
black hat Data Area Reconstruction
black hat System Area Reconstruction
black hat Data Extraction from Files
black hat MFS Templates from fit.exe
black hat Special Files
black hat intel.cfg (fitc.cfg) Structure
black hat intel.cfg Partial Dump
black hat MFS Directory
black hat Integrity, Encryption, Anti-Replay
black hat FS Security Keys
black hat Crypto Engine / Usage Practices
black hat Key Derivation and Usage
black hat File System Types in VFS
black hat Black Hat Sound Bytes