OpenPGP Card is an ISO/IEC 7816-4 compatible smartcard that is integrated with many OpenPGP functions, including signature, encryption, and authentication. It provides an trustful computing environment isolated from the host computer, to guard one's private keys from attacks and exposures. ZetiControl in Germany is the first manufacturer of OpenPGP Card based on BasicCard platform. Since then, compatible USB tokens have also been manufactured, such as Yubikey and Nitrokey.

Currently for compatible USB tokens, there are two approaches of OpenPGP Card implementation:

  1. Based on secure hardware.
    • The hardware is usually temper-proof to some extents, but the system is usually proprietary with mandatory NDA required, such as Yubikey.
  2. Based on generic microcontroller, with gnuk firmware developed by Niibe Yutaka.
    • It allows 100% free hardware design and software, but the chip is not hardened for security thus vulnerable to physical attacks.

In other words, the user is forced to choose between security and transparency.

But thanks to the IoT hype, many NDA-free and regulation-free "secure elements" for cryptograpic key storage have entered the market. This project is going to perform early experiments with a ATECC508A chip by Atmel, and see if it is possible to integrate it to the gnuk USB token to improve the physical security, allowing users to secure their private data with GnuPG with a high degree of physical security.

Looking for hackers with the skills:

gnupg gpg pgp security cryptography embedded arm microcontroller stm32 atmega

This project is part of:

Hack Week 17

Activity

  • about 4 years ago: biergaizi added keyword "stm32" to this project.
  • about 4 years ago: biergaizi added keyword "atmega" to this project.
  • about 4 years ago: biergaizi added keyword "gnupg" to this project.
  • about 4 years ago: biergaizi added keyword "gpg" to this project.
  • about 4 years ago: biergaizi added keyword "pgp" to this project.
  • about 4 years ago: biergaizi added keyword "security" to this project.
  • about 4 years ago: biergaizi added keyword "cryptography" to this project.
  • about 4 years ago: biergaizi added keyword "embedded" to this project.
  • about 4 years ago: biergaizi added keyword "arm" to this project.
  • about 4 years ago: biergaizi added keyword "microcontroller" to this project.
  • about 4 years ago: biergaizi started this project.
  • about 4 years ago: biergaizi originated this project.

  • Comments

    • TBro
      almost 4 years ago by TBro | Reply

      Did you heard of: https://www.nitrokey.com/de Seems to be open hardware =)

    Similar Projects

    FIDO2 emulation by mkoutny

    [comment]: # (Please use the project descriptio...


    Project Verifree : internal key server(s) by mcaj

    Project description

    The project Verifree...


    Learn more about Application Security (AppSec) Open Source Tools and Testing Techniques by heidi.bronson

    [comment]: # (Please use the project descriptio...


    Explore Crev as collaborative code audit by pperego

    Project Description

    Crev [1] is a collabo...


    Kanidm - Modern Opensource Identity Management by firstyear

    Project Description

    Kanidm is a identity ma...


    Model checking the BPF verifier by shunghsiyu

    Project Description

    BPF verifier plays a ...


    Poking technologies for enrolling customer key to kernel trusted keyring by joeyli

    [comment]: # (Please use the project descriptio...


    Project Verifree : internal key server(s) by mcaj

    Project description

    The project Verifree...


    OMEMO Hexchat plugin by dknorr

    [comment]: # (Please use the project descriptio...


    FIDO2 emulation by mkoutny

    [comment]: # (Please use the project descriptio...


    Use ESP-01S as WiFi to UART bridge by iivanov

    Project Description

    Currently with just ...


    Install BLOB-less U-Boot in SPI of Pine64 ROCKPro64 and boot from NVMe disk by clanig

    Project Description

    This project is about i...


    Add Graphics Mode to WozMania by e_bischoff

    Project description

    WozMania is an Apple ...


    indoor air quality sensor by rsimai

    Description

    I noticed during home office ...