4 ms·

We open sourced the firmware. To our knowledge this is the 1st open source implementation of FIDO2/CTAP2. Our firmware is designed to be run/developed without

We open sourced the firmware. To our knowledge this is the 1st open source implementation of FIDO2/CTAP2. Our firmware is designed to be run/developed without hardware, and we have implementations already for efm32 and nrf52840. We're actively working on a new port to SAM L11 that will use ARM TrustZone for improved security. There's still a lot to do on the ecosystem side. We'd like to improve tests, code style and comments, and make it pass some static analysis tools. Feel free to join the discussions in the github issues, and of course we'd love to see you at our Kickstarter that will launch VERY soon (like in the next couple weeks). You can join the waitlist at https://solokeys.com https://solokeys.com

lysp 8y ago
I'm not from America, can you please explain what "early Fall" means? Changing the website to an approximate month or a quarter would be fantastic for those of us not from that side of the world.
- jtr_47 8y ago
  Early fall should be around end of September - through October
  - lysp 8y ago
    Many thanks!
  - ecesena 8y ago
    Yes. We're still defining the exact date, but it should be within the next two weeks. We're working on some really exciting partnerships, we need a few more days to finalize details. So far we're super excited about how the campaign is coming up!
linuxdude314 8y ago
Has it been cross compiled for Tomu.im ?
- ecesena 8y ago
  Not that I'm aware of. Might be trickier than U2F (that exists already) because FIDO2 is a bit more computationally expensive, and probably larger code base. But certainly an interesting project to add to the pipeline.
- conorpp 8y ago
  Tomu, being a ARM M0 core, might take some time to compute ECC signatures, but it is probably fine in practice. Our code is designed to be small and portable, so I think it could easily be run on the Tomu. Just need some work to change the USB drivers stuff.
nickik 8y ago
Would be really great to have it on the upcoming RISC-V secure hardware, that should be released soon. Then we would have open hardware implementation of this on a open application core as well. Thank you so much for open sourcing this!
- ecesena 8y ago
  Are you involved in any ways? Do you know if there are developer previews available?
  - nickik 8y ago
    Not really involved. Just fascinated. I don't know of that actually happening officially but probably you can. See: https://keystone-enclave.org/ https://keystone-enclave.org/ MIT worked before on Sanctum that you might want to look at, its sort of the pre-version of what keystone will be. See: https://eprint.iacr.org/2015/564.pdf https://eprint.iacr.org/2015/564.pdf

lysp 8y ago

I'm not from America, can you please explain what "early Fall" means? Changing the website to an approximate month or a quarter would be fantastic for those of us not from that side of the world.

jtr_47 8y ago
Early fall should be around end of September - through October
- lysp 8y ago
  Many thanks!
- ecesena 8y ago
  Yes. We're still defining the exact date, but it should be within the next two weeks. We're working on some really exciting partnerships, we need a few more days to finalize details. So far we're super excited about how the campaign is coming up!

linuxdude314 8y ago

Has it been cross compiled for Tomu.im ?

ecesena 8y ago
Not that I'm aware of. Might be trickier than U2F (that exists already) because FIDO2 is a bit more computationally expensive, and probably larger code base. But certainly an interesting project to add to the pipeline.
conorpp 8y ago
Tomu, being a ARM M0 core, might take some time to compute ECC signatures, but it is probably fine in practice. Our code is designed to be small and portable, so I think it could easily be run on the Tomu. Just need some work to change the USB drivers stuff.

nickik 8y ago

Would be really great to have it on the upcoming RISC-V secure hardware, that should be released soon. Then we would have open hardware implementation of this on a open application core as well. Thank you so much for open sourcing this!

ecesena 8y ago
Are you involved in any ways? Do you know if there are developer previews available?
- nickik 8y ago
  Not really involved. Just fascinated. I don't know of that actually happening officially but probably you can. See: https://keystone-enclave.org/ https://keystone-enclave.org/ MIT worked before on Sanctum that you might want to look at, its sort of the pre-version of what keystone will be. See: https://eprint.iacr.org/2015/564.pdf https://eprint.iacr.org/2015/564.pdf