Defcon badges feature new open-source chip for enhanced security

Defcon attendees will receive conference badges this year featuring a new open-source chip designed by hardware hacker Andrew "bunnie" Huang. This chip, called the Baochip-1x, aims to advance security, transparency, and trustworthiness in computing, with further coverage provided by Ars Technica.

The Baochip-1x is a "mostly" open-source microcontroller that allows for verifiable security. Huang has published the source code for its operating system, firmware, processor core, and cryptographic engines on GitHub, enabling inspection and use by researchers. Unlike traditional chips encased in opaque plastic, the Baochip's packaging allows for visual inspection of its internal structures using infrared light, addressing supply-chain concerns. The chip's core module can be removed after the conference and used as a hardware security token, supporting FIDO authentication and time-based one-time passwords. It includes a low-resolution camera for QR code scanning, designed to prioritize privacy.

Huang believes the chip is highly resistant to non-physical attacks and can withstand significant resource-based attacks, though he acknowledges that adversaries with substantial resources could potentially overcome its defenses. The chip runs an operating system written in Rust and incorporates features like secure boot and a true random number generator.

Source: Ars Technica