USB armory - open hardware platform, can be used as hardware wallet

[aldous]

Project page: http://inversepath.com/usbarmory

The documentation wiki at https://github.com/inversepath/usbarmory/wiki/Applications refers to Electrum being tested running on the device.

http://inversepath.com/images/usbarmory_coin_web.jpg

From the press release:

Inverse Path is proud to announce the USB armory project, an open source hardware design, implementing a flash drive sized computer for security applications.

The USB armory is a compact USB powered device that provides a platform for developing and running a variety of applications.

The security features of the USB armory System on a Chip (SoC), combined with the openness of the board design, empower developers and users with a fully customizable USB trusted device for open and innovative personal security applications.

The USB armory hardware is supported by standard software environments and requires very little customization effort. In fact vanilla Linux kernels and standard distributions run seamlessly on the tiny USB armory board.

The capability of emulating arbitrary USB devices in combination with the SoC speed, the security features and the flexible and fully customizable operating environment, makes the USB armory the ideal platform for all kinds of personal security applications.

The Inverse Path team, with the help of the open source community, will develop applications that fully explore the potential of the USB armory board.

The USB armory will be available for pre-order soon. Delivery of the device before the end of 2014 is planned.

Target applications:

- mass storage device with advanced features such as automatic encryption, virus scanning, host authentication and data self-destruct
- OpenSSH client and agent for untrusted hosts (kiosk)
- router for end-to-end VPN tunnelling, Tor
- password manager with integrated web server
- electronic wallet (e.g. pocket Bitcoin wallet)
- authentication token
- portable penetration testing platform
- low level USB security testing

[1714622028]

1714622028

[1714622028]

1714622028

[Snail2]

WOW! Impressive. Will these machines work through a powered USB hub attached to let's say a Raspberry?

[aldous]

Yes, quoting the project page "USB host powered (<500 mA) device with compact form factor (65 x 19 x 6 mm)".

[intron]

...watching...

[wobber]

And what about BadUSB exploitation?

[btchip]

And what about BadUSB exploitation?

BadUSB is just a case of "insecure devices with firmware flashing capabilities are insecure" which is utterly obvious and does not apply here.
Moreover the same thing was already done in 2009, in a more scary version.

This development platforms looks interesting - I'm eager to see public and open source use cases of TrustZone in the wild. Do you already have some pointers regarding that ?

[aldous]

The Genode framework implements TZ for the same processor (http://genode.org/documentation/articles/trustzone).

[btchip]

The Genode framework implements TZ for the same processor (http://genode.org/documentation/articles/trustzone).

Thanks, should have read your page better

[HeroCat]

It sounds good - but what will say your os about that ?

[btchip]

Is there a full public datasheet of the i.MX53 available somewhere ?

SCCv2 seems nice for a wallet

Security controller, version 2 (SCCv2)—Improved SCC with AES engine, secure/non-secure
RAM and support for multiple keys as well as TZ/non-TZ separation