Google e hlahisitse OpenSK stack e bulehileng bakeng sa ho theha li-tokens tsa cryptographic

Google hlahisoa Sethala sa OpenSK, se u lumellang hore u thehe firmware bakeng sa li-tokens tsa cryptographic tse lumellanang ka botlalo le litekanyetso FIDO U2F и FIDO2. Li-tokens tse lokiselitsoeng ho sebelisoa OpenSK li ka sebelisoa e le li-authenticators bakeng sa ho netefatsa lintlha tse ka sehloohong le tse peli, hammoho le ho netefatsa boteng ba 'mele ba mosebedisi. Morero o ngotsoe ka Rust le ajoa ke e nang le tumello tlas'a Apache 2.0.

OpenSK e etsa hore ho khonehe ho iketsetsa letšoao bakeng sa bopaki ba lintlha tse peli libakeng tsa marang-rang, tseo, ho fapana le tharollo e lokiselitsoeng e entsoeng ke baetsi ba kang Yubico, Feitian, Thetis le Kensington, e hahiloeng holim'a firmware e bulehileng ka ho feletseng, e fumanehang bakeng sa ho atolosa le ho hlahloba. OpenSK e behiloe e le sethala sa lipatlisiso seo bahlahisi ba li-token le ba chesehelang ba ka se sebelisang ho hlahisa likarolo tse ncha le ho khothaletsa li-tokens ho bongata. Khoutu ea OpenSK e qalile e le kopo ea TockOS 'me e lekoa ho liboto tsa Nordic nRF52840-DK le Nordic nRF52840-dongle.

Ho phaella ho morero oa software li fanoa meralo ea ho hatisa mochining oa 3D senotlolo sa USB fob housing e thehiloeng ho chip e tsebahalang Nordic nRF52840, ho kenyelletsa le ARM Cortex-M4 microcontroller le crypto accelerator
ARM TrustZone Cryptocell 310. Nordic nRF52840 ke sethala sa pele sa litšupiso sa OpenSK. OpenSK e fana ka tšehetso bakeng sa accelerator ea ARM CryptoCell crypto le mefuta eohle ea lipalangoang e fanoang ke chip, ho kenyeletsoa USB, NFC le Bluetooth Low Energy. Ntle le ho sebelisa accelerator ea crypto, OpenSK e boetse e lokiselitse ts'ebetsong e fapaneng ea ECDSA, ECC secp256r1, HMAC-SHA256 le AES256 algorithms e ngotsoeng ka Rust.

Re lokela ho hlokomela hore OpenSK ha se ts'ebetsong ea pele e bulehileng ea firmware bakeng sa li-tokens tse nang le tšehetso bakeng sa FIDO2 le U2F; firmware e tšoanang e ntse e ntlafatsoa ke merero e bulehileng. Solo и Somu. Ha ho bapisoa le merero e boletsoeng, OpenSK ha e ngotsoe ka C, empa e ngotsoe ke Rust, e qobang bofokoli bo bongata bo hlahang ho tsoa ho ts'ebetsong ea mohopolo o tlaase, joalo ka ho fihlella mohopolo o sa lefelloeng ka mor'a nako, li-null pointer dereferences, le buffer overruns.

Firmware e reriloeng bakeng sa ho kenya e thehiloe ho TockOS,
Sistimi ea ts'ebetso bakeng sa li-microcontrollers tse thehiloeng ho Cortex-M le RISC-V, e fanang ka karohano ea sandbox ea kernel, bakhanni le lits'ebetso. OpenSK e entsoe joalo ka applet ea TockOS. Ntle le OpenSK, Google e boetse e lokiselitse TockOS e ntlafalitsoeng bakeng sa li-flash drives (NVMC) polokelo mme beha likotopo. Li-kernel le bakhanni ba TockOS, joalo ka OpenSK, li ngotsoe ka Rust.

Source: opennet.ru