4 ms·

The lack of a chapter "physical security" in their documentation is rather disappointing. There's a few bits on the wiki, but that's it. Physical security - tha

• nickpsecurity 10y ago
  "One might prefer a Pi with a suitable smartcard attached..." It's what my pal "Thoth" is essentially working on minus the Pi part. The EAL5-6 rated smartcards have significant effort put into SW protections and tamper-resistance. Not stopping high-end attackers with physical access in all likelihood but might keep out riff raff. He's putting mail and/or file encryption on them to protect keys against host compromise. Tells me the Ledger Blue is the best of the new, more-open ones as they know what Red-Black separation is, implement some of it physically, have trusted path, and act on some feedback. Check it out. EDIT: Given this is open source, I forgot to mention multiple smartcards & SW TCB's can be combined in voter configuration with trusted hardware & software to reduce risk of vendor subversion. Unlikely that all the major vendors would work together or be compromised by same group unless threat profile is too big for most to survive already. :)