Google yakaunza OpenSK yakavhurika stack yekugadzira cryptographic tokens

Google yakaunzwa OpenSK platform, iyo inokubvumira kuti ugadzire firmware ye cryptographic tokens inonyatsoenderana nemitemo FIDO U2F и FIDO2. Tokens dzakagadzirirwa uchishandisa OpenSK dzinogona kushandiswa seathenticators ekutanga uye maviri-factor authentication, pamwe nekusimbisa kuvepo kwemuviri kwemushandisi. Iyo purojekiti yakanyorwa muRust uye inoparadzirwa ne ine rezinesi pasi peApache 2.0.

OpenSK inoita kuti zvikwanise kugadzira chiratidzo chako chechokwadi chezviviri-zvimisikidzo pamasaiti, izvo, kusiyana neakagadzirira-akagadzirwa mhinduro dzakagadzirwa nevagadziri vakaita seYubico, Feitian, Thetis neKensington, yakavakirwa pane yakavhurika zvachose firmware, inowanikwa kuti iwedzere uye kuongororwa. OpenSK inomisikidzwa senzvimbo yekutsvagisa iyo vagadziri vezviratidzo uye vanofarira vanogona kushandisa kugadzira zvitsva uye kusimudzira zviratidzo kune ruzhinji. Iyo OpenSK kodhi yakatanga kugadzirwa sekunyorera TockOS uye yakaedzwa paNordic nRF52840-DK uye Nordic nRF52840-dongle mabhodhi.

Mukuwedzera kune software project zvinopihwa marongero ekudhinda pa 3D printer USB kiyi fob imba yakavakirwa pane yakakurumbira chip Nordic nRF52840, kusanganisira ARM Cortex-M4 microcontroller uye crypto accelerator
ARM TrustZone Cryptocell 310. Nordic nRF52840 ndiyo yekutanga referensi chikuva cheOpenSK. OpenSK inopa rutsigiro rweARM CryptoCell crypto accelerator uye marudzi ese ekufambisa anopihwa nechip, kusanganisira USB, NFC uye Bluetooth Low Energy. Pamusoro pekushandisa iyo crypto accelerator, OpenSK yakagadzirirawo kupatsanurwa kweECDSA, ECC secp256r1, HMAC-SHA256 uye AES256 algorithms yakanyorwa muRust.

Izvo zvinofanirwa kucherechedzwa kuti OpenSK haisi yekutanga kuvhurika kuisirwa firmware yematokeni nerutsigiro rweFIDO2 uye U2F; yakafanana firmware iri kuvandudzwa nemapurojekiti akavhurika. Solo и Somu. Kuenzaniswa nemapurojekiti ataurwa, OpenSK haina kunyorwa muC, asi muRust, iyo inodzivirira huzhinji hwehutera hunomuka kubva kune yakaderera-level memory kubata, sekuwana mushure-yemahara memory, null pointer dereferences, uye buffer overruns.

Iyo firmware inokurudzirwa yekumisikidza yakavakirwa pa TockOS,
inoshanda sisitimu ye microcontrollers yakavakirwa paCortex-M uye RISC-V, ichipa sandbox kuparadzaniswa kwepakati, vatyairi uye maapplication. OpenSK yakagadzirirwa seapplet yeTockOS. Pamusoro peOpenSK, Google yakagadzirirawo TockOS yakagadziridzwa yeFlash drives (NVMC) kuchengetedza uye set zvigamba. Iyo kernel nevatyairi muTockOS, seOpenSK, yakanyorwa muRust.

Source: opennet.ru