TAMI - wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
{{ :tamiwiki:projects:pasted:20231105-190213.png?400}}
> hosting a workshop themed around repurposing cheap ST-LINK clones (I got two for 14.39 ILS including shipping from [[https://www.aliexpress.com/item/32860702733.html|Aliexp]]). The idea is to teach people how to turn them into FIDO2 (Webauthn) hardware tokens which can be used for 2FA on many popular websites (including Github, Google account, Facebook and many more, see [[https://www.dongleauth.com/|dongleauth]]) or OpenPGP smartcards (can be used for e.g. ssh keys, signing/decrypting e-mail etc). Of course the MCUs (STM32F103 or compatibles) do not feature real tamper-resistance and can be cloned (with considerable effort) given physical access to them but for many threat models that is not problematic. [paul]


Plan of the class:

  - Shallow overview about hardware security tokens
  - Introduction into using SWD protocol to flash and debug Cortex-based MCUs
  - Hands-on experience in flashing [[https://github.com/gl-sergei/u2f-token|FIDO2]] or [[https://wiki.debian.org/GNUK|GNUK]] (OpenPGP smartcard)
  - (optional) desoldering 0402 pull down resistor to make button work
  - (optional) fitting an SMD switch button
  - Testing on websites
  - (optional) General discussion about STM32 software development, compiling and flashing blinkies, debugging etc.


Ideas to consider:

  - How to estimate the demand and decide on a suitable date?
  - Should we order some ST-LINKs in advance and offer them in exchange for donation? What about the SMD switches, is there some stock?
  - Can we do thermal transfer to the aluminium cases to add TAMI branding?
TAMI - wiki

User Tools

Site Tools

Page Tools
