Google releases OpenSK, an open-source 2FA security key platform

-

While Google has done a lot for mobile security, a little known fact about the company is that they love to dabble with security keys. The Titan line of security keys has full integration with your Android or iOS smartphone and can be used to authenticate your login to your Google account. Google has now launched OpenSK, an open-source project that will allow developers to create and build their own 2FA security key.

OpenSK, written in Rust, is simple as it supports both the FIDO U2F and FIDO2 standards. It follows the legacy of other open-source projects such as Solo and Somu, another set of open-source security key platforms. Google’s hopes are that developers and security key manufacturers alike will benefit.

By opening up OpenSK as a research platform, our hope is that it will be used by researchers, security key manufacturers, and enthusiasts to help develop innovative features and accelerate security key adoption.

With this early release, developers will be able to flash OpenSK on a Nordic chip dongle. The Nordic chip dongle supports all of the major features of FIDO2, such as NFC, Bluetooth Low Energy, USB, and a dedicated hardware crypto core.

“We’re excited to collaborate with Google and the open source community on the new OpenSK research platform,” said Kjetil Holstad, Director of Product Management at Nordic Semiconductor. “We hope that our industry leading nRF52840’s native support for secure cryptographic acceleration combined with new features and testing in OpenSK will help the industry gain mainstream adoption of security keys.”

OpenSK is written in Rust and runs on TockOS for better isolation and cleaner OS abstractions. Rust has strong memory safety which can help protect against logical attacks, whilst TockOS offers a sandboxed architecture for better isolation of the security key applet, drivers, and kernel. If you’re interested, be sure to check out the link below.

Source: Google | Via: AndroidPolice

The post Google releases OpenSK, an open-source 2FA security key platform appeared first on xda-developers.



Comments

Post a Comment

Popular posts from this blog

Honor 20 Pro is Now Available in 14 Countries

-
Image
The Honor 20 was off to a really rocky start with the controversial U.S.A. ban on HUAWEI. While the future of the phone was initially unclear, the planned launch of the phone is now in full swing. As this phone’s complicated launch slowly starts to be available around the world, here are all the places where you can get an Honor 20 Pro.   Country Availability Date Selling Channel Russia 2019/8/2 DNS . MTS, GB 2019/8/1 Amazon.uk , CPW , o2, H3G France 2019/8/22 Amazon, Boulanger, Cdiscount, Darty, FREE, Fnac. Orange, SFR. Offline [HONOR Shop Paris & Lyon] German 2019/7/21 MSD, 1&1 mobile, Amazon , Mediamarket/ phonehouse Netherlands 2019/7/31 bol.com , Belsimpel Czechia 2019/8/15 Alza Finland 2019/8/13 ELsia DNa Poland 2019/8/8 RTV EURO AGD , X-Kom Malaysia 2019/8/15 HiHonor , Shopee . Offline [all HONOR stores in Malaysia] Saudi Arabia 2019/7/31 Pre-sell 2019/8/6 First day sale HiHonor Egypt 2019/7/29 Pre-s...
Read more

Motorola’s foldable Razr phone may be announced before year’s end

-
While Samsung’s saga with the Galaxy Fold appears to finally be coming to an end , there are other foldables destined to be released soon. The Huawei Mate X is the other big name, but it has been delayed a couple of times as well. The other foldable device that we’ve heard about a few times is the rumored Motorola Razr reboot, and a new report claims an announcement is coming this year still. Earlier this year, reports suggested Motorola would launch its foldable phone this summer. That time has come and gone without a peep from Motorola, but a new report claims it’s still coming this year. This information comes from a person close to the company speaking to CNET . It’s unlikely that the device will actually be sold this year, but we should at least see the device before 2020. Motorola has already confirmed that they are working on a foldable smartphone. The “Razr” name was also confirmed by a Bluetooth certification. We exclusively reported on the specifications of the device ,...
Read more

Behind Dynamic System Updates in Android Q: How Google is using Project Treble to improve future Android releases

-
Image
Alongside the release of Android 8.0 Oreo, Google unveiled Project Treble : a major rearchitecting in the way the Android OS framework and the vendor HALs and Linux kernel communicate. Treble is a major initiative designed to reduce Android platform version and security patch fragmentation , and all Android-branded devices launching with Android Pie are required to support Project Treble. OEMs and vendors test Treble compatibility by booting a Generic System Image (GSI)—a pure stock build of Android from AOSP—and passing the Vendor Test Suite (VTS) and Compatibility Test Suite-on-Generic System Image (CTS-on-GSI). The GSI has proven useful in not only allowing software engineers working for OEMs test Treble compatibility, but it has also opened the door for a large custom ROM community on XDA. For the Android Q release, Google wants to make GSIs useful for another group: app developers. Since the first stable release and source code drop of any given Android platform release usual...
Read more