Tillitis TKey - a radically open auth platform that fits in your pocket
summary
An open-source USB auth token built as an FPGA system image that is personalized per device: an iCE40 UltraPlus FPGA with a PicoRV32 CPU, 4 KB firmware, ~1.8 KB protected RAM, ring‑oscillator TRNG and capacitive touch, plus a read‑once unique device secret and CDI derived from app hash+UDS+optional user secret. Toolchain is fully open (yosys/nextpnr/icestorm), builds take about two minutes, the design pushes ~91% utilization of the ~5k LUT device. Shipping devices run an Ed25519 signer, an SSH agent for Linux/Mac/Windows, and a security audit is complete with report pending.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 3:24Motivation for TKey
- 7:38MT1 to first TKey
- 10:12Hardware architecture
- 16:16Key use cases
- 18:51Open source toolchain
- 22:07Security features
- 24:13SSH agent integration
- 27:05Supply chain integrity
- 30:37Current state and plans
- 34:54Q&A
related talks
21mThe OpenTitan Project
49mCryptech - Open Hardware Security Modules for a safer, open world
53mSecure Embedded Linux Product - A Success Story
16mTrusted RV: Trusted Execution Environment, Secure Coprocessor, and their Program...
45mBuilding a Secure IoT Device
45mThe Future of Security is in Open Silicon
54mForging the USB Armory
11mOP-TEE open-source security for the mass-market