BootStomp: On the Security of Bootloaders in Mobile Devices