3 ms·
This is soo cool! Very happy to see this. One thing I mentioned in a talk about at the TKey at FOSS-North this spring was that the internal name for the projec
by JoachimS 3y ago
This is soo cool! Very happy to see this.
One thing I mentioned in a talk about at the TKey at FOSS-North this spring was that the internal name for the project at Mullvad that ultimately lead to the TKey was "TPM-ish". The idea was to develop a evice with just the parts of the TPM API needed to perform measured boot, but that we could control and trust.
This idea got simplified into a hardware Root of Trust device that could only do Ed25519 signing. Basically an iCE 40 UP FPGA mounted on a PCB talking SPI or LPC. And since it was based on RISC-V it didn't take long until Mullvad founder Fredrik Strömberg proposed that by combining with the DICE concept we could generalize it into what has become the Tkey.
The TKey Unlocked will be available very soon. These devices are not provisioned and not locked by Tillitis. This allows you to provision the UDS and UDI yourself, and do anything else you want with the TKey. This includes modifying the FW and the FPGA design. There will also be a TKey programmer to allow you to program TKey devices:
https://shop.tillitis.se/ https://shop.tillitis.se/
- loup-vaillant 3y ago> This is soo cool! Very happy to see this. Glad you like my article, it means a lot. > The TKey Unlocked will be available very soon. That's excellent news, I can't wait to play with those. If I could pre-order one right now I would. :-)