Nitrokey on RISC-V using Trussed, Xous, Baochip
Security token with open hardware all the way down
Today's Nitrokey USB security tokens, even if using open-source software, still rely on proprietary microcontrollers with closed documentation and opaque security mechanisms. This project ports the Nitrokey, an open-source security token supporting FIDO2/Passkeys, OpenPGP card, PIV and more, to the open RISC-V architecture. The stack will be the established Rust-based Trussed firmware framework, the security-oriented Xous microkernel OS, and the Baochip RISC-V system-on-chip. The result will be the first security token built entirely on an open hardware architecture to enable independent security audits of the complete stack, from silicon to application--strengthening digital sovereignty and trustworthy open hardware.
Run by Nitrokey GmbH
This project was funded through the NGI0 Commons Fund, a fund established by NLnet with financial support from the European Commission's Next Generation Internet programme, under the aegis of DG Communications Networks, Content and Technology under grant agreement No 101135429. Additional funding is made available by the Swiss State Secretariat for Education, Research and Innovation (SERI).
