4 ms·

Or one of the Nitrokeys, which are generally more affordable and have open source firmware: https://www.nitrokey.com https://www.nitrokey.com

• rincebrain 7y ago
  Do they offer a good solution to the dual problem of: - if you can flash/read everything, so can an attacker - if you have a blackbox nothing can peer into, how can you trust the device?
  • oarsinsync 7y ago
    It looks like the very first FAQ answers that: 1) You generate your own root keys, to deploy onto the device, 2) You can't read the root keys back off the device once it's deployed.
    • rincebrain 7y ago
      That doesn't quite answer my question, I think. My statement was that: - if you have an opaque enclave on the device (e.g. a black box you can't peer into), you can't know what it's doing - if you don't, you can read the private key bits out Your statement was that it has a private enclave you cannot extract key material out of, which resolves the latter half of the question, but not the former, I think?