Open source project that can DIY security key started by Google

If you focus on PC security, it may be ideal to protect your PC with two-factor authentication, such as the Google Titan security key. To disseminate such security keys, Google announced OpenSK, a project to open source authentication technology for security keys. This way, you can prepare your own USB body as well as software for authentication technology.

Elie Bursztein, head of security research at Google, is excited to announce OpenSK, an open source security key that can easily prevent phishing, on January 30, 2020. Said that they are using it.

OpenSK is written in Rust, an open source system programming language supported by Mozilla. OpenSK is publicly available on GitHub. Anyone can freely download and use.

The security key has been tested for operation on the nRF52840 dongle and nRF52840 DK, USB devices of Nordic Semiconductor, a Norwegian semiconductor company. However, both of these products have exposed substrates, making it inconvenient to carry around. Therefore, a blueprint for making a case to protect the security key is also disclosed.

The blueprint supports various 3D printers, including the MakerBot 3D printer, Replicator 2X. There is also a gap for pressing the button, so there is no problem with operation even if the case is used. Buzztain explained that OpenSK was written in Rust and has strong memory safety and zero cost, so it has strengths in logical attacks. However, since this project is still in the development stage, it has not been officially tested and has not been officially recognized by FIDO. Related information can be found here .