Pa55ware - A Cheap, DIY Hardware Password Safe
Authors: Nicolas Oberli, Manoé Zwahlen

Date: December 2013
Publication: 5th International Conference on Passwords (Passwords13 Bergen)
Source: Currently no known Internet copy of paper.

Abstract or Summary:
Got some time, around 50$, a soldering iron and want to secure your passwords? This talk presents an open hardware-based password manager that anyone can build and use.

This project is based around a Teensy 3.0 device. Since it can emulate a keyboard, we started building a secure hardware storage using a 1.8 TFT LCD, touch input, a SD card reader and a 3D printed box. Using various libs and many arduino-fu, we managed to design a rather simple yet secure (we hope so) password storage that stores the passwords on the SD card and can type them on your laptop. As the Teensy also offers the possibility to use a RTC with the addition of a simple oscillator, we also added the possibility to use it as a hardware token that supports the TOTP algorithm.

In this presentation, we will show the following things :
* What we did to protect the passwords, both on the SD card and in memory
* The tricks we added in order to prevent some attacks like timing attacks for example
* What encryption algorithms we used


PasswordResearch.com Note: Video of presentation: https://www.youtube.com/watch?v=l3d-7UNUW1g


Do you have additional information to contribute regarding this research paper? If so, please email siteupdates@passwordresearch.com with the details.

<-- Back to Authentication Research Paper Index





[Home] [About Us] [News] [Research]

Copyright © 2019 PasswordResearch.com