nitrokey-fido2-firmware VS tillitis-key1

PyPy received an EU grant sometime in the late 2000s or early 2010s, although it had to be a different one. If I understood TFA correctly, NLnet is partially funded by this money? NLnet itself distributes money to very cool software things[1]—some moonshots[2], some very down-to-earth and usable ones[3].

[1] https://nlnet.nl/project/current.html

[2] https://spectrum-os.org/

[3] https://www.nitrokey.com/

Ever thought of using something like https://www.nitrokey.com/ or Blackphone? Remove your mics and cameras

Yes, Nitrokey.

KeePassXC mostly; andOTP when I don't have my laptop with me. Recently got my Nitrokey, which works great as well. Has both USB-C as well as NFC, so that might be the more convenient alternative to andOTP in the future.

Other FIDO2 devices allow the firmware to be rewritten but Yubico does not allow such changes. I prefer Yubico's approach so we have better assurance of validity. https://github.com/Nitrokey/nitrokey-fido2-firmware

Having a look at their documented threat model: https://github.com/tillitis/tillitis-key1/blob/main/doc/thre...

I love this particular detail, listed under Assumptions:

> The end user is not an attacker. The end user at least doesn't knowingly aid the attacker in attacks on their device.

I love this, it's exactly what I want from a HSM device. However, sadly, most vendors today deploy TPMs in such a way that the end-user is an attacker (see: Google SafetyNet) - and the TKey is kinda incompatible with that, I suppose.

I'm not sure if they are publicly available yet by tillitis may be what you're looking for.

No, not yet. Physical attacks are out of scope for the TKey1, even if we have some mechanisms in play which try to extend the time and effort required to perform a successful evil maid-attack extracting the Unique Device Secret (UDS). See the threat model for the release:

https://github.com/tillitis/tillitis-key1/blob/main/doc/thre...

The current casing is fairly tamper evident (it will break), but we do not yet use real, tamper evident sealing. We are looking at tamper sealing for future versions. And ways to further protect against physical attacks.

Mullvad VPN has announced that they are working on the "Tillitis"[1] key and it looks like it's releasing pretty soon (2023-03-23).

From the website:

>The TKey™ is a new kind of USB security key inspired by measured boot and DICE.

>TKey™s design encourages developers to experiment with new security key applications and models in a way that makes adoption easier and less risky forend-users.

>TKey™ is and always will be open source hardware and software. Schematics, PCB design and FPGA design source as well as all software source code can be found on GitHub.

[1]: https://www.tillitis.se/ -- also "tillit" is Swedish for "trust"

Given a suitable app, the Tillitis Key 1 works as a RNG. I have written a first version, and will release one in the public app repository in a week or so.

https://github.com/tillitis/tillitis-key1

https://github.com/tillitis/tillitis-key1-apps

No, the integrity is within the device. You load the small (64k) apps onto the key and the content of the apps with the unique key for the device can be used by the app to perform cryptography and their integrity can be audited. This is similar to JavaCard with cryptographic integrity of the applets. Read more at: https://github.com/tillitis/tillitis-key1/blob/main/doc/syst...