Aerosol Posted December 12, 2014 Report Posted December 12, 2014 https://player.vimeo.com/video/114250016 An open source USB stick computer for security applications.The USB Armory is full-blown computer (800MHz ARM® processor, 512MB RAM) in a tiny form factor (65mm x 19mm x 6mm USB stick) designed from the ground up with information security applications in mind. Not only does the USB Armory have native support for many Linux distributions, it also has a completely open hardware design and a breakout prototyping header, making it a great platform on which to build other hardware.FEATURES AND SPECIFICATIONSHardwareFreescale i.MX53 ARM® Cortex™-A8 800MHz512MB DDR3 RAMUSB host powered (<500mA)Dimensions: 65mm x 19mm x 6mmuser-controllable LED7-pin breakout header [pinout of GPIOs, UART, and power]microSD card slot [https://github.com/inversepath/usbarmory/wiki/microSD-compatibility]compatibility chart]100% open source hardware [source files and wiki]SoftwareThe USB Armory hardware is supported by standard software environments and requires very little customization effort. In fact, vanilla Linux kernels and standard distributions run seamlessly on the tiny USB Armory board:boots off of microSD card [or via USB serial downloader]native support for Android, Debian, Ubuntu, FreeBSD [it’s easy to create boot images]USB device emulation [CDC Ethernet, mass storage, HID, etc.]ConnectivityHigh Speed USB 2.0 On-The-Go (OTG) with full device emulationfull TCP/IP connection to/from USB Armory via USB CDC Ethernet emulationflash drive functionality via USB mass storage device emulationserial communication over USB or physical UARTSecurityThe ability to emulate arbitrary USB devices in combination with the i.MX53 SoC speed and fully customizable operating environment makes the USB Armory an ideal platform for all kinds of personal security applications. Not only is the USB Armory an excellent tool for testing the security of other devices, but it also has great security features itself:ARM® TrustZone®secure boot + storage + RAMuser-fused keys for running only trusted firmwareoptional secure mode detection LED indicatorminimal design limits scope of supply chain attacksgreat auditability due to open hardware and softwareThe support for ARM® TrustZone®, in contrast to conventional trusted platform modules (TPMs), allows developers to engineer custom TPMs by enforcing domain separation between the “secure” and “normal” worlds that propagates throughout all SoC components, as opposed to limited only to the CPU core.APPLICATIONS $ ssh alice@10.0.0.1 Welcome to your USB armory $ ?The following example security application ideas illustrate the flexibility of the USB Armory concept:mass storage device with advanced features such as automatic encryption, virus scanning, host authentication and data self-destructOpenSSH client and agent for untrusted hosts (e.g Internet kiosks)router for end-to-end VPN tunnellingTor bridge [see this, for example]password manager with integrated web serverelectronic wallet [the Electrum Bitcoin wallet works out of the box on the USB Armory. It has been tested with X11 forwarding from Linux as well as Windows hosts.]authentication tokenportable penetration testing platformlow level USB security testingCOMMUNITYThe USB Armory is an open source hardware and software project created by Inverse Path, an Italian information technology consulting group specializing in securing critical embedded systems in the avionic, automotive, and industrial control sectors. The Inverse Path team, with the help of the open source community, will develop applications that explore the potential of the USB Armory. Please participate!project homemaking-of presentationpublic repositoriesdocumentation wikidiscussion groupMANUFACTURING PLANThree major revisions of the USB Armory (alpha, beta and release candidate) have been prototyped and manufactured, a local Italian manufacturer has been selected, and the first batch is ready for production.The funds raised by this campaign will go toward covering the cost of parts, fabrication, assembly, and shipping. A margin for unexpected expenses and application development has been reserved, but otherwise the price has been kept as low as possible in order to make the USB Armory a reality.There are no bulk discounts or early bird deals to ensure that everyone has the possibility of obtaining the USB Armory at the lowest price.At present, an Italian board fabricator and assembly house will produce the USB Armory and all units will be shipped to backers of the campaign through Crowd Supply’s fulfillment service in the US.First 40 Units Ship ImmediatelyThe first 40 USB Armory units sold will be shipped as soon as the campaign has reached its funding goal. These units have already been produced as part of the final test batch and are identical to those that will be in the main production run, which will ship approximately six weeks after the campaign reaches its funding goal.Source Quote
