Yutaka Niibe

Gnuk Token is a security hardware USB token for GnuPG, which supports OpenPGP card protocol. The important feature is it avoids special thing like hardware accelerator or tool (which comes with NDA). Development environment, Tools, Firmware, and hardware design are all free, as they should be.

FST-01 was designed and used as a reference hardware implementation for Gnuk. In 2011, FST-01 was designed as free hardware design with KiCAD, so that people can use Gnuk Token for their computing, having the nature of reproducible by other parties. In 2016, we had a revision called FST-01G, following update of KiCAD. FST-01 and FST-01G were mass produced and sold more than 1200 pieces (2012-2018). In 2018, it has major update, now called FST-01SZ, using Chinese chip (GD32F103TB) and Chinese connector for USB, following another update of KiCAD. In this short talk, I will show my experience of FST-01/FST-01G/FST-01SZ, focusing new revision.

See https://www.gniibe.org/memo/development/fst-01/fst-01-revision-sz.html for an explanation and https://www.gniibe.org/memo/development/fst-01/fst-01sz-testplan.html for the test plan.

Gnuk is an implementation of USB cryptographic token for GnuPG. It conforms OpenPGP card specification, implements USB CCID protocol, and supports modern ECC, i.e., Ed25519 and X25519.

I started the project in 2010, and to enable better support, I joined GnuPG development. I had a talk in FOSDEM2012. It wasn't go well as I expected in 2012.

I needed to design my own free hardware design for reference hardware. That's FST-01. I needed to design and implement True Random Number generator of my own. That's NeuG.

For better control of hardware resource, I develop a thread library named Chopstx.

In 2016, at OpenPGP.conf, I realized that people generally hesitate new hardware. Thus, in 2017, I modified Chopstx so that it can run on GNU/Linux as emulation. Now, a user can run Gnuk on normal GNU/Linux as an emulation, by USBIP, without real physical hardware device.

In short, my talk is: Everything is free software (firmware on the device, driver on host), and hardware has free hardware design, but that's not enough. Emulation is useful, hopefully.