tillitis/tkey-verification
View on GitHub ↗ ★ 45 Go
Vendor signing and user verification of TKey genuineness
3 mentions on Hacker News by 3 people: 0 stories, 3 comments · first 2023-12-26 · latest 2024-03-27
20082026
-
…about the TKey, but it looks like they have some kind of remote attestation protocol available? ( https://github.com/tillitis/tkey-verification/tree/main/cmd/ ...). That's usually how you avoid TOFU. There is a tool to verify if the device…
comment by cobratbq · 2024-03-27 · in A simple, (as-of-yet unidentified) asymmetric Authenticated Key Exchange -
…about the TKey, but it looks like they have some kind of remote attestation protocol available? ( https://github.com/tillitis/tkey-verification/tree/main/cmd/... ). That's usually how you avoid TOFU. (1) the tillitis CA certifies your TKey…
comment by phlip9 · 2024-03-27 · in A simple, (as-of-yet unidentified) asymmetric Authenticated Key Exchange -
…the moment. A1's key pair could also be signed by the vendor before shipping. We do it like this: https://github.com/tillitis/tkey-verification
comment by kfreds · 2023-12-26 · in TKey is a RISC-V computer in a USB-C case, that can run security applications