Google’s OpenSK project – Google open-sources the firmware needed to build hardware security keys

guest · Jan 30, 2020

Google open-sources the firmware needed to build hardware security keys
OpenSK, a Rust-based project to aid hardware vendors build hardware security keys
January 30, 2020
https://www.zdnet.com/article/googl...mware-needed-to-build-hardware-security-keys/

Google has open-sourced today a new project called OpenSK that will make it easier for hobbyists and hardware vendors to build their own security key.

The project, which has been open-sourced on GitHub, contains Rust-based firmware that can be installed on Nordic chip dongles and effectively convert the dongle into a FIDO U2F and FIDO2-complaint security key.
The idea is to provide all the materials needed so people who can't openly buy security keys can, at least, make their own.

"By opening up OpenSK as a research platform, our hope is that it will be used by researchers, security key manufacturers, and enthusiasts to help develop innovative features and accelerate security key adoption," Google said today in a blog post.
Click to expand...

"In addition to being affordable, we chose Nordic as initial reference hardware because it supports all major transport protocols mentioned by FIDO2: NFC, Bluetooth Low Energy, USB, and a dedicated hardware crypto core," Google said.

"Rust's strong memory safety and zero-cost abstractions makes the code less vulnerable to logical attacks. TockOS, with its sandboxed architecture, offers the isolation between the security key applet, the drivers, and kernel that is needed to build defense-in-depth."
Installation instructions are available in the GitHub repo.
Click to expand...

Google: Say hello to OpenSK: a fully open-source security key implementation

To help advance and improve access to FIDO authenticator implementations, we are excited, following other open-source projects like Solo and Somu, to announce the release of OpenSK, an open-source implementation for security keys written in Rust that supports both FIDO U2F and FIDO2 standards.

To learn more about OpenSK and how to experiment with making your own security key, you can check out our GitHub repository today.
Click to expand...

Log in or Sign up

Google’s OpenSK project – Google open-sources the firmware needed to build hardware security keys

guest Guest

Log in or Sign up

Google’s OpenSK project – Google open-sources the firmware needed to build hardware security keys

guest Guest

Useful Searches