Anyone concerned with security might be interested in a new open source entropy generator that has been created by Paul Campbell at Moonbase Otago called OneRNG.
OneRNG has been created specifically to generate random numbers that your system can use for cryptography and is completely open source, secure but hackable and is now available to back over on the Kickstarter crowdfunding website looking to raise $10,000.
“After Edward Snowden’s recent revelations about how compromised our internet security has become some people have worried about whether the hardware we’re using is compromised – is it? We honestly don’t know, but like a lot of people we’re worried about our privacy and security.
What we do know is that the NSA has corrupted some of the random number generators in the OpenSSL software we all use to access the internet, and has paid some large crypto vendors millions of dollars to make their software less secure. Some people say that they also intercept hardware during shipping to install spyware.
We believe it’s time we took back ownership of the hardware we use day to day. This project is one small attempt to do that – OneRNG is an entropy generator, it makes long strings of random bits from two independent noise sources that can be used to seed your operating system’s random number generator. This information is then used to create the secret keys you use when you access web sites, or use cryptography systems like SSH and PGP.
Openness is important, we’re open sourcing our hardware design and our firmware, our board is even designed with a removable RF noise shield (a ‘tin foil hat’) so that you can check to make sure that the circuits that are inside are exactly the same as the circuits we build and sell. In order to make sure that our boards cannot be compromised during shipping we make sure that the internal firmware load is signed and cannot be spoofed.
The board cannot be reprogrammed over USB by errant software in your host computer. However we also believe that you don’t truly own your hardware if you can’t open it and tinker with it, more importantly you can’t verify that what we promise is what you actually get if you can’t do the same – so we offer the same programmer that we use to program it with, plus a cable as an added premium – we hope you’ll hack away and make something even greater with what we’ve created.”
For more information on the new OneRNG open source entropy generator jump over to the Kickstarter website for details via the link below.