Board designs, FPGA verilog, firmware for TKey, the flexible and open USB security key
Go to file
Jonas Thörnblad f66617431b
Update toolchain with new versions of FPGA tools and remove fw/apps/programmer toolschains
- Change docker image to ubuntu 24.04

 - Add new versions of:
	* clang (18.1.3, part of ubuntu 24.04)
	* icestorm (commit 738af822905fdcf0466e9dd784b9ae4b0b34987f)
	* yosys (0.45)
	* nextpnr (0.7) + extra patches for RNG seed handling and early exit
	* iverilog (v12)
	* verilator (v5.028)
	* verible (v0.0-3795)
	* cocotb (v1.9.1)
 - Remove:
	* gcc-arm-none-eabi
	* libnewlib-arm-none-eabi
	* libstdc++-arm-none-eabi-newlib
	* pico-sdk
	* golang
2024-10-16 18:43:29 +02:00
.github/workflows USB: move firmware for usb-to-serial MCU (CH552) 2024-06-25 15:47:22 +02:00
contrib Update toolchain with new versions of FPGA tools and remove fw/apps/programmer toolschains 2024-10-16 18:43:29 +02:00
doc doc: Move software.md to fw/README 2024-06-27 22:22:14 +02:00
hw Include SPI master in default build 2024-10-16 12:50:32 +02:00
LICENSES Use tkey-builder:2; add hashes & checks for bitstream & fw bins 2023-07-04 09:04:23 +02:00
.editorconfig Help our editors fight less 2022-09-21 14:47:24 +02:00
.gitattributes Make initial public release 2022-09-19 08:51:11 +02:00
.gitignore Fix makefile lines and tee exit status problem 2024-10-08 16:07:17 +02:00
dco.md Add dco file and link to the dco in README 2022-11-21 13:47:42 +01:00
README.md doc: Note where doc is to be found 2024-07-01 17:09:29 +02:00

ci

Tillitis TKey

Introduction

The Tillitis TKey is a new kind of USB security token. What makes the TKey unique is that it allows a user to load and run applications on the device, while still providing security. This allow for open-ended, flexible usage. Given the right application, the TKey can support use cases such as SSH login, Ed25519 signing, Root of Trust, FIDO2, TOTP, Passkey, and more.

During the load operation, the device measures the application (calculates a cryptographic hash digest over it) before running it on the open hardware security processor. This measurement is similar to TCG DICE.

Each TKey device contains a Unique Device Secret (UDS), which together with the application measurement, and an optional User-Supplied Secret (USS), is used to derive key material unique to each application. This guarantees that if the integrity of the application loaded onto the device has been tampered with, the correct keys needed for an authentication will not be generated.

Key derivation with a User-Supplied Secret allows users to build and load their own apps, while ensuring that each app loaded will have its own cryptographic identity, and can also be used for authentication towards different services.

The TKey platform is based around a 32-bit RISC-V processor and has 128 KB of RAM. Firmware can load and start an app that is as large as RAM.

All of the TKey software, firmware, FPGA Verilog source code, schematics and PCB design files are open source. Like all trustworthy security software and hardware should be. This in itself makes it different, as other security tokens utilize at least some closed source hardware for its security-critical operations.

Tillitis Key 1 PCB, first implementation The TK1 PCB, the first implementation of the TKey.

Getting started

The official website is tillitis.se.

The Tkey can be purchased at shop.tillitis.se.

TKey software developer documentation is available in the TKey Developer Handbook.

Specific documentation regarding implementation is kept close to the code/design in README files, typically in the same directory.

Tkey Device Apps

Offically supported apps can be found at tillitis.se

The source and other projects from us can be found here at our GitHub.

Other known (but not all) projects can be found at dev.tillitis.se.

Note that development is ongoing. To avoid unexpected changes of derived key material, please use a tagged release. Read the Release Notes to keep up to date with changes and new releases.

About this repository

This repository contains hardware, firmware and utilities written as part of the TKey. It is structured as monolithic repository, or "monorepo", where all components live in one repository.

Device and client applications, however, are kept in other repositories here at our GitHub.

Licensing

See LICENSES for more information about the projects' licenses.

All contributors must adhere to the Developer Certificate of Origin.