How do you brute force the PIN if the KDF process operates over the PIN, plus a 256-bit UID that&#x27;s only accessible to signed code running on the SoC?<p>If you modify the kernel on the NAND, signature checks in the on-die bootloader will fail, and you won&#x27;t get to run.<p>If you modify application binaries on the NAND, signature checks in the signed kernel will fail, and you won&#x27;t get to run.