gateway_mfr icon indicating copy to clipboard operation
gateway_mfr copied to clipboard

ATECC alternatives

Open shawaj opened this issue 4 years ago • 3 comments

@madninja @cokes518 would you have any objection to us building in support to this tool / creating a new similar one for chips other than the ATECCx08x ones?

Lead times are getting up to around 74 weeks for new orders....presumably due to heavy demand. So seems to make sense to support others "officially".

Bobcat use the RJGT102WDP8 and there are other similar chips and more substantial TPMs etc. from Infineon, Maxim, NXP, Microchip, ST etc.

shawaj avatar May 12 '21 17:05 shawaj

@shawaj As long as the TPM has the same security properties, it should be considered HIP19 compliant.

Note that while adding support for a new security module to gateway_mfr would be nice, it first and foremost would require integration with Miner and eventually Light Hotspot (ie: gateway-rs) clients.

Other vendors have brought up using TPM2.0 compliant devices as they appear to have good kernel support in Linux, afaict. That would make the driver fairly straightforward and leave the effort focused on connecting Miner/LightHotspot to a TPM2.0 device.

lthiery avatar May 12 '21 17:05 lthiery

We actually have a RasPi tpm2.0 board that we have never released. Using the infineon optiga slb9670.

Has pretty good support in Linux and more generally...

https://github.com/Infineon/eltt2 https://github.com/tpm2-software https://github.com/wolfssl/wolfTPM

@lthiery do you know if the bobcat devices using the RJGT102WDP8 have some custom software to support it? Hard to tell if it's a clone of the ATECC or not as datasheet is in Chinese.

shawaj avatar May 12 '21 20:05 shawaj

Created two PR for TPM support: https://github.com/helium/miner/pull/940 https://github.com/helium/gateway_mfr/pull/7

isergieienkov avatar Jul 19 '21 13:07 isergieienkov