Gentoo Archives: gentoo-nfp

From: Aaron Bauman <bman@g.o>
To: gentoo-nfp@l.g.o
Subject: Re: [gentoo-nfp] Developer Crypto Hardware (AGM)
Date: Sun, 19 Aug 2018 19:14:09
Message-Id: 20180819191402.GA24564@monkey
In Reply to: Re: [gentoo-nfp] Developer Crypto Hardware (AGM) by Andrew Savchenko
1 On Sun, Aug 19, 2018 at 09:57:16PM +0300, Andrew Savchenko wrote:
2 > Hi!
3 >
4
5 [snip]
6
7 > 1. Are they open hardware? At the very least chip and board
8 > schematics should be available. At best they should be reproducible
9 > by third parties.
10 >
11
12 Please see the link at [1]
13
14
15 > 2. How token integrity is protected during shipment?
16 >
17 > Otherwise all this security enhancement will be marginal at best if
18 > not fake, since if device is tampered with physically or on design
19 > level, it provides no additional security, only a dangerous false
20 > sense of such security enhancement.
21 >
22
23 All keys are shipped directly from the manufacturer, but I am not aware
24 of anyway to garauntee the supply chain.
25
26 > Best regards,
27 > Andrew Savchenko
28
29 [1]: https://github.com/Nitrokey/nitrokey-pro-hardware
30
31 --
32 Cheers,
33 Aaron

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies

Subject Author
Re: [gentoo-nfp] Developer Crypto Hardware (AGM) Andrew Savchenko <bircoph@g.o>