btchip

3 ms·

1. 1.▲
   by btchip 10y ago

   the benefit is running native ARM code that you can verify vs running slow interpreted code in a black box. Have a look at the SHA-512 implementation in Java Card quoted in the article and it should be fairly obvious why you want to avoid t
2. 2.▲
   by btchip 10y ago

   the projects I quoted above have the same "security model" then
3. 3.▲
   by btchip 10y ago

   Well side channel attacks should be very relevant for all projects involving security. And several similar projects have already been produced (see TREZOR, KeepKey in the Bitcoin space), based on a similar chip which is in my opinon not gre
4. 4.▲
   by btchip 10y ago

   This architecture allows you to move gradually from certified libraries (included in the proprietary HAL) to your own custom libraries when you're satisfied with the result.
5. 5.▲
   by btchip 10y ago

   It's based on public ARM specifications (MPU + service calls) so the attack surface is way smaller compared to a virtual machine and the performance is of course way better. Applications can still corrupt their own memory space temp
6. 6.▲
   by btchip 10y ago

   yes, some parts of the chip are still available only under NDA (typically I/Os, cryptographic accelerators, tamper detection)