Tillitis Key – Mullvad spin-off inspired by measured boot and DICE
1–10 of 123 posts
Re: Tillitis Key – Mullvad spin-off inspired by measured boot and DICE
#2RYF certification?
Re: Tillitis Key – Mullvad spin-off inspired by measured boot and DICE
#3Re: Tillitis Key – Mullvad spin-off inspired by measured boot and DICE
#4Am I right in thinking that this is basically like a yubikey except with openness as key differentiator?
Or is it’s function something else ?
Re: Tillitis Key – Mullvad spin-off inspired by measured boot and DICE
#5> Something that makes the key unique is the fact that both its software and hardware are open source
Aren't SoloKeys [1] also open hardware and software? Or is the Tillitis key more general purpose and thus not in the same category?
Re: Tillitis Key – Mullvad spin-off inspired by measured boot and DICE
#6[deleted]
Re: Tillitis Key – Mullvad spin-off inspired by measured boot and DICE
#7Good VPN company (one of the best) and good idea (sounds like USB Armory). But the best it can do is assure that their VMs are not logging anything and keep other promises. Will they also be able to share details of their hosting setup in a way you can independently verify (because they can always have more middleware transparent traffic logging VMs)? doubt it, same goes to whomever they use for hosting.
My point is, while I don't ascribe to the extremes of pro or anti VPN sentiments, having a good understanding of what services like this can and cannot do and performing rudimentary yet essential security and privacy risk asessment is essential before trusting them with all your traffic.
Re: Tillitis Key – Mullvad spin-off inspired by measured boot and DICE
#8Am I right in thinking that this is basically like a yubikey except with openness as key differentiator? Or is it’s function something else ?
Not exactly sure, but the OSFC conference page has some extra info on what it can do:
https://www.osfc.io/2022/talks/tillitis-key-a-usb-security-k...
Maybe it will be ~YubiKey plus extras?
Re: Tillitis Key – Mullvad spin-off inspired by measured boot and DICE
#9Am I right in thinking that this is basically like a yubikey except with openness as key differentiator? Or is it’s function something else ?
Probably for use with something like secure enclave.
Re: Tillitis Key – Mullvad spin-off inspired by measured boot and DICE
#10> Something that makes the key unique is the fact that both its software and hardware are open source Aren't SoloKeys [1] also open hardware and software? Or is the Tillitis key more general purpose and thus not in the same category? [1] https://solokeys.com/
My understanding is that it's both a more general platform (targeting more than 2FA) and also uses an FPGA running open-source code, so that the "secure enclave" functionality can be inspected and found to be secure, rather than just trusting NXP/ARM's chip as SoloKeys have done.