[{"data":1,"prerenderedAt":363},["ShallowReactive",2],{"project-12053181":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":27,"sentiment":28,"stance_mix":29,"scored_comments":34,"aspects":35,"strip":45,"post_text":46,"what":47,"said":72,"maker_in_thread":158,"shape":169,"grid":173,"attempts":325,"same_week":326,"maker_shows":40,"maker_hidden":355,"reader_version":356,"card":357},"12053181","The SC4-HSM","A fully open USB hardware secure module","title","Show HN: The SC4-HSM, a fully open USB hardware secure module","https:\u002F\u002Fsc4.us\u002Fhsm\u002F","sc4.us","lisper",1467942823,2016,137,61,256,2264,12,"notable","security_privacy","hardware security module","hardware",[21,24,25,26],"usb hsm","open source hardware","key storage","mixed",0.162,{"positive":30,"neutral":31,"mixed":32,"critical":33},10,8,1,5,24,{"idea":36,"design":39,"privacy":41,"docs":43,"execution":44},{"positive":37,"critical":38},6,0,{"positive":38,"critical":40},3,{"positive":32,"critical":42},2,{"positive":32,"critical":38},{"positive":38,"critical":38},[38,38,38,40,40,38,38,38,38,32,38,32,32,38,33,33,38,38,38,40,33,38,33,38,40,38,33,32,33,38,33,40,32,38,40,40,38,38,38,33],null,{"problem":48,"audience":46,"pricing":58,"motivation":46,"time_to_build":46,"stack":62,"openness":69,"stage":70,"team_size":71},{"value":49,"source":50,"evidence":51},"Keeps cryptographic keys isolated from a compromised host computer.","maker",[52,55],{"id":53,"by":11,"text":54},"12053590","> Calling this an HSM is somewhat disingenuous Well, I had to call it something. I'm open to suggestions. > tamper self-destruction of key material That's true, but there is…",{"id":56,"by":11,"text":57},"12056142","If an attacker pwns your host they can do anything you can do. If you can access the smartcard, then the attacker can too. As soon as you plug the card in, the card is just as…",{"value":59,"source":50,"evidence":60},"under $100",[61],{"id":53,"by":11,"text":54},[63],{"value":64,"source":50,"evidence":65},"STM32F415 microcontroller",[66],{"id":67,"by":11,"text":68},"12053786","> Awesome. Thanks! > why STM\u002FARM? The STM32F415 is specifically designed for crypto and security-sensitive applications. It has built-in support for AES and other crypto…","open_source","launched","unknown",{"praise":73,"objections":90,"requests":114,"questions":129,"alternatives":142},[74],{"value":75,"source":76,"evidence":77},"Open source approach and thorough work praised","commenter",[78,82,86],{"id":79,"by":80,"text":81},"12054010","watersb","I am impressed and thankful for this as open-source. You learn a lot when you attempt to secure the hardware. A good starting place.",{"id":83,"by":84,"text":85},"12053591","mrsteveman1","I've been watching this project since I saw it mentioned in an HN comment some time ago, it's nice to see stuff like this being worked on. Doubly so because I envisioned building…",{"id":87,"by":88,"text":89},"12054038","mmlopes","I've been looking for something like this in a while. It would be feasible to make something like this but with a Bluetooth interface instead (I'm concerned about MITM attacks)?…",[91,101,108],{"value":92,"source":76,"evidence":93},"Not a real HSM: no tamper destruction or side-channel protection",[94,98],{"id":95,"by":96,"text":97},"12053564","mcpherrinm","Calling this an HSM is somewhat disingenuous, as it seems to contain none of the usual defenses found in a \"real\" hardware security module, like tamper self-destruction of key…",{"id":99,"by":96,"text":100},"12053601","At least in my mind, the defining attribute of an HSM is protection against physical compromise of the device. Maybe we disagree on that definition: I guess it is hardware, and…",{"value":102,"source":76,"evidence":103},"Display makes it fragile for pocket carry",[104],{"id":105,"by":106,"text":107},"12055207","kabdib","Hmmm, it has a display. This is going to last about two days in my pocket. For the last year I've been carrying around a couple Yubikeys on my keychain. They've been through the…",{"value":109,"source":50,"evidence":110},"Hardware and firmware not audited",[111],{"id":112,"by":11,"text":113},"12057163","> at the current price point, this device is actually plausible to experiment with Yes, that's really the idea at this point. Neither the hardware nor the firmware have been…",[115,122],{"value":116,"source":76,"evidence":117},"Publish hardware schematics and PCB layout",[118],{"id":119,"by":120,"text":121},"12054075","sschueller","Where can I find the HW schematics and the PCB layout?",{"value":123,"source":76,"evidence":124},"Add beeper for alerts",[125],{"id":126,"by":127,"text":128},"12054129","ComodoHacker",">The display and user buttons protect against an attack launched from the host machine. Before the unit performs a cryptographic operation it can display information about what…",[130,137],{"value":131,"source":76,"evidence":132},"Why STM32 and ARM instead of RISC-V",[133],{"id":134,"by":135,"text":136},"12053718","jaekwon","Awesome. One question... why STM\u002FARM? I'm not an expert in the available choices, but I'm generally curious about RiskV devices because they're fully open. Are the designs of…",{"value":138,"source":76,"evidence":139},"Is the chip design auditable or could it have a backdoor",[140,141],{"id":134,"by":135,"text":136},{"id":67,"by":11,"text":68},[143,147,151],{"value":144,"source":76,"evidence":145},"Smartcards",[146],{"id":99,"by":96,"text":100},{"value":148,"source":76,"evidence":149},"Yubikey",[150],{"id":105,"by":106,"text":107},{"value":152,"source":76,"evidence":153},"Ledger Blue wallet",[154],{"id":155,"by":156,"text":157},"12057216","nickpsecurity","Security assessment is a bottom-up process. Most security in a HSM is in the hardware. This is clearly not using secure IC's as illustrated in the smartcard market. It's already…",{"comments":159,"answered":160,"key":161},22,11,[162,163,166],{"id":53,"text":54},{"id":164,"text":165},"12053679","> smartcard Those are not at all secure against compromised hosts. > EM\u002FRF emissions You probably don't want to use this to secure the nuclear launch codes. But I think you'd…",{"id":167,"text":168},"12054148","You could certainly do something like this with a pi. But it would be bulkier and probably less secure. But my initial prototyping was done with a Teensy3. It all depends on your…",{"commenters":170,"max_depth":30,"maker_replies":159,"first_comment_mins":171,"lifespan_hours":172},30,154,83,[174,176,178,180,181,185,187,189,193,195,198,200,202,204,207,211,214,218,222,224,227,229,232,236,239,240,243,245,247,251,252,253,256,258,261,264,268,270,271,273,274,276,277,280,281,284,287,290,295,297,300,302,304,306,308,310,313,315,317,319,322],[95,38,38,175,96,38],"commenter\u002Fcritical\u002Fdesign",[53,38,38,177,11,32],"project\u002Fneutral\u002Fexecution",[99,38,38,179,96,38],"commenter\u002Fneutral\u002Fdesign",[164,38,38,177,11,32],[182,38,40,183,184,38],"12054070","project\u002Fneutral\u002Fidea","mSparks",[167,38,38,186,11,32],"project\u002Fneutral\u002Fdesign",[188,38,40,183,184,38],"12054621",[190,38,38,191,192,38],"12055177","commenter\u002Fneutral\u002Fnone","amluto",[56,38,38,194,11,32],"project\u002Fpositive\u002Fdesign",[196,38,38,191,197,38],"12056382","Karunamon",[199,38,38,191,11,32],"12056491",[201,38,38,191,197,38],"12056622",[203,38,38,186,11,32],"12056727",[205,38,38,191,206,38],"12053753","brians",[208,38,32,209,210,38],"12053821","project\u002Fcritical\u002Fdesign","zimmerfrei",[212,38,38,191,213,38],"12061864","serendipitous",[215,38,32,216,217,38],"12054114","project\u002Fcritical\u002Fprivacy","kosma",[219,38,40,220,221,38],"12054118","project\u002Fneutral\u002Fnone","mkj",[223,38,32,216,217,38],"12054168",[225,38,38,226,11,32],"12054200","project\u002Fneutral\u002Fprivacy",[228,38,38,226,11,32],"12054160",[230,38,33,231,217,38],"12065085","project\u002Fpositive\u002Fprivacy",[233,38,33,234,235,38],"12054682","project\u002Fpositive\u002Fidea","captainmuon",[237,38,33,234,238,38],"12054951","technion",[112,38,38,220,11,32],[241,38,38,191,242,38],"12056670","akiselev",[244,38,38,191,235,38],"12056949",[246,38,38,226,11,32],"12057200",[248,38,38,249,250,38],"12070725","other\u002Fneutral\u002Fnone","hellomoto998",[134,32,40,186,135,38],[67,32,38,194,11,32],[254,32,33,234,255,38],"12053886","e12e",[257,32,38,220,11,32],"12053902",[259,32,33,260,255,38],"12054643","project\u002Fpositive\u002Fnone",[262,32,38,249,263,38],"12054252","pjc50",[265,32,38,266,267,38],"12054367","other\u002Fneutral\u002Fprivacy","frederikvs",[269,32,38,266,106,38],"12055188",[126,42,40,186,127,38],[272,42,38,186,11,32],"12054188",[83,40,33,234,84,38],[79,275,33,260,80,38],4,[105,33,32,209,106,38],[278,33,40,186,279,38],"12056244","halomru",[87,37,33,234,88,38],[282,37,38,283,11,32],"12054074","maker\u002Fpositive\u002Fnone",[285,37,33,234,286,38],"12055995","slinger",[288,37,38,289,11,32],"12059717","maker\u002Fneutral\u002Fnone",[291,292,40,293,294,38],"12054209",7,"project\u002Fneutral\u002Fdocs","unwind",[296,292,38,293,11,32],"12059705",[298,31,32,209,299,38],"12053912","franciscop",[301,31,38,186,11,32],"12054071",[119,303,40,293,120,38],9,[305,303,38,293,11,32],"12059711",[155,30,40,307,156,38],"project\u002Fmixed\u002Fexecution",[309,30,38,191,11,32],"12059715",[311,160,38,249,312,38],"12053572","sillysaurus3",[314,160,38,177,11,32],"12053804",[316,160,38,249,312,38],"12053917",[318,160,38,249,11,32],"12053943",[320,160,33,321,312,38],"12054000","project\u002Fpositive\u002Fdocs",[323,160,38,324,11,32],"12054065","maker\u002Fneutral\u002Fdocs",[],[327,332,337,342,346,350],{"id":328,"name":329,"points":330,"category":331},"12049410","AutoMicroFarm",203,"infrastructure",{"id":333,"name":334,"points":335,"category":336},"12054596","Tailor",202,"web_saas",{"id":338,"name":339,"points":340,"category":341},"12077645","Dependency CI",198,"dev_tools",{"id":343,"name":344,"points":345,"category":331},"12087238","Polybit",151,{"id":347,"name":348,"points":349,"category":341},"12085563","stacktile",148,{"id":351,"name":352,"points":353,"category":354},"12068943","Hera",87,"ai",false,"v2",{"id":358,"name":5,"line":6,"ai":355,"cat":20,"year":13,"points":14,"comments":15,"rec":27,"s":359,"top":18,"kw":360,"maker":11,"domain":10,"tier":19,"attempts":38,"strip":361,"url":9,"mix":362,"praise":75,"objection":92,"sub":21},12053181,0.16,[21,24,25,26],"0003300001011055000350503051505310330005",[30,31,32,33],1794036545691]