Re:OneRNG – Open Hardware Random Number Generator
by gcommer on Tuesday October 28, 2014 @09:26AM
(#8520800)
None of the images show the other side of the board, but unless every trace is visible, it will be difficult to non-destructively inspect. If its only a 2 layer board then this just means scratching off the white silkscreen, which wouldn't be too bad. If its more than 2 layers, you would have to have access to an X-ray machine.
Re:OneRNG – Open Hardware Random Number Generator
by Taniwha on Tuesday October 28, 2014 @01:41PM
(#8522263)
it's a two layer board - no buried wires or vias - by design there are very few wires on the bottom layer, none under the noise source (we want to contain the noise) - you can see all the wires without removing the solder mask just by holding it in the right light
we'll be publishing the layout files of course
Re:OneRNG – Open Hardware Random Number Generator
by joezydeco on Tuesday October 28, 2014 @09:34AM
(#8520828)
How do we verify the internal microcode and switch fabric of the TI CC2531?
IMO it seems like simply trusting the large block diagram that says "USB PHY" is a very weak point in the design.
Re:OneRNG – Open Hardware Random Number Generator
by WaywardGeek on Tuesday October 28, 2014 @01:14PM
(#8522054)
Still, a USB phy is required. How would you solve this problem? Would a FTDI USB chip be more palatable?
Re:OneRNG – Open Hardware Random Number Generator
by joezydeco on Tuesday October 28, 2014 @02:23PM
(#8522557)
Who knows. Perhaps a Verilog implementation on an FPGA? Discrete gates and GPIOs galore?
Sarcasm and FTDI chips aside, I'm hoping the point was clear. Guess it wasn't.
Using USB as the physical transport from dongle to CPU just introduces more black boxes in a system where everyone was bragging about no black boxes. But since we're past the age of parallel ports and discrete GPIOs on these machines, there doesn't seem to be an easy answer.
Dumping the firmware means you can ensure it's not been modified (presumably from when you uploaded it to the device yourself).
Being able to inspect components means you can ensure it's still exactly as you built it. And if you haven't, you can visually check that it does what it says it does.
If you're not technically competent to make this verification, you can ask somebody you trust and who is to do it for you.