<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">Hi<div><br></div><div>Thanks for your presentations! I like the minimal approach - did you look at the Tillitis key?<div><br></div><div><a href="https://tillitis.se/">https://tillitis.se/</a><div><br></div>They take an even more minimal approach and doesn’t even have on board storage.</div><div><br></div><div>A minimal approach (no CCID, less PGP) seems like a good idea. The tillitis key only has a ed25519 signer, nothing more. I think that is a good interface but I think storage is important - so you can store PGP-related stuff, for some glue code on the host. I also dislike how it is impossible to use your own private key with tillitis, this is an important use-case for trust reasons. Ed25519 is easily compromisable (nonce gen) for hardware-bound private keys. A pure ed25519 interface also make supporting non-PGP simple, assuming it supports ed25519.</div><div><br></div><div>However, I have a question: would you consider including some relative performant target board as well? Something that could do Classic McEliece or SPHINCS+ without significant effort? Just add some of the reference code and it would fit without storage issues. Could even be a raspberry pi zero or similar.</div><div><br><div><div dir="ltr">/Simon</div><div dir="ltr"><br><blockquote type="cite">8 aug. 2024 kl. 04:24 skrev NIIBE Yutaka <gniibe@fsij.org>:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><span>Hello,</span><br><span></span><br><span>I had a talk at Debconf24 in Busan, and I did valuable conversations</span><br><span>with our token users (not only Gnuk, but also other ones, including</span><br><span>proprietary Yubikey). From ShenZhen friend, I got one token</span><br><span>implementation, named CanoKeys. The website seems:</span><br><span>https://www.canokeys.org/</span><br><span></span><br><span>Debconf24's main venue was "Mirae" building. Mirae means future. So, I</span><br><span>named the next version of Gnuk as "Mirae".</span><br><span></span><br><span>After some discussions in Busan, my major idea for Gnuk Mirae is:</span><br><span></span><br><span>- minimize the implementation, to be bare crypto operations </span><br><span>- moving code from the implementation on device side to host side</span><br><span></span><br><span> * * *</span><br><span></span><br><span>I started Gnuk Mirae development with CH32V203 MCU.</span><br><span></span><br><span>Major social/technical difficulty for this stage would be "reproducible"</span><br><span>procurement for development environment. If you have a good Chinese</span><br><span>contact, no problem. However, using AliExpress/Taobao/etc. is a bit</span><br><span>difficult for foreign person. At least for me, buying some parts/boards</span><br><span>is not always reproducible.</span><br><span></span><br><span>Thus, today, I'd like to share information for procurement. I'm not</span><br><span>sure if it's effective for you, but it can give you some hints.</span><br><span></span><br><span></span><br><span>(1) The development board</span><br><span></span><br><span>aliexpress.com:</span><br><span> CH32V203G8R6-EVT-R0</span><br><span></span><br><span> WCH Official Store</span><br><span> 2Pcs/Lot CH32V203 Evaluation Board low-power consumption</span><br><span> small-medium capacity</span><br><span></span><br><span>This is a board with CH32V203G8R6 MCU.</span><br><span></span><br><span>CH32V203C8T6-EVT-R0 is also good. I selected CH32V203G8R6 for now,</span><br><span>considering the possible my own handsoldering of the chip (It's easier</span><br><span>when it has less pins. TSOP is a bit easier than QFP).</span><br><span></span><br><span></span><br><span>(2) The debugger</span><br><span></span><br><span>aliexpress.com:</span><br><span> WCH LinkE</span><br><span></span><br><span> CNEWTEC Electronics Store</span><br><span> WCH LinkE Online Download Debugger Support WCH RISC-V</span><br><span> Architecture MCU/SWD Interface ARM Chip 1 Serial Port to USB Channel</span><br><span></span><br><span>This is a clone of WCH LinkE. WCH LinkE mini (another clone) would also</span><br><span>work well (I don't use that yet). I selected the clone, because</span><br><span>official ones are tend to change (to be newer versions of firmware).</span><br><span>YMMV.</span><br><span></span><br><span></span><br><span>(3) Jumper wires</span><br><span></span><br><span>mouser.com:</span><br><span> SchmartBoard</span><br><span> Jumper Wires</span><br><span> 920-0112-50</span><br><span></span><br><span>This is reproducible. I use these juper wires to connect the board</span><br><span>to the debugger. I also use them to connect LEDs on the board to</span><br><span>GPIO pins.</span><br><span>-- </span><br><span></span><br><span>_______________________________________________</span><br><span>Gnuk-users mailing list</span><br><span>Gnuk-users@gnupg.org</span><br><span>https://lists.gnupg.org/mailman/listinfo/gnuk-users</span><br></div></blockquote></div></div></div></body></html>