Make your own security key with Google's OpenSK - Help Net Security

Make your own security key with Google's OpenSK - Help Net Security

Google has open-sourced OpenSK, firmware that, combined with an affordable chip dongle, allows you to make your own security key to use for authentication purposes.



About OpenSK


OpenSK isan open-source implementation for security keys that supports both FIDO U2F and FIDO2 standards.


“Under the hood, OpenSK is written in Rust and runs on TockOS to provide better isolation and cleaner OS abstractions in support of security,” Elie Bursztein, Google’s Security & Anti-abuse Research Lead, and Jean-Michel Picod, Software Engineer, Google, explained.


“Rust’s strong memory safety and zero-cost abstractions makes the code less vulnerable to logical attacks. TockOS, with its sandboxed architecture, offers the isolation between the security key applet, the drivers, and kernel that is needed to build defense-in-depth. Our TockOS contributi ..

Support the originator by clicking the read the rest link below.