[Cryptech Tech] CryptoStick

[Leif Johansson]

On 2014-07-03 18:46, Russ Housley wrote:
> https://www.crypto-stick.com/en/introduction
> 
> I just learned about this.  They claim:
> -- 100% Open Source software and hardware; open interfaces for easy integration
> -- Firmware updates can be applied easily
> -- The installed firmware can be exported to allow verifying its correctness and absence of backdoors.
> -- All development tools are available as open source and for free
> 
> The hardware seems to be very different.  They have incorporated:
> -- A PCB with an Atmel AT32 microprocessor which stores the firmware, AES working keys (encrypted by the master key), and configurations.
> -- A MicroSD card as mass storage. Class 10 is preferred for maxium speed.
> -- The OpenPGP (smart) Card is PIN-protected and stores the AES master key and RSA keys. Special features will become standard in the next OpenPGP Card version.
> 
> What can we learn from their effort?
> 

a lot about packaging at the very least probably .. looks like they are
using gpg applets (?) to authenticate to the core

I wonder if they've implemented crypto or just used the existing
algorithms though... if so it is a very different level of ambition than
what we are shooting for

> Russ
> _______________________________________________
> Tech mailing list
> Tech at cryptech.is
> https://lists.cryptech.is/listinfo/tech
>