
Tillitis TKey
The TKey is a new kind of USB security key inspired by measured boot and DICE. Each TKey device contains a Unique Device Secret (UDS), which together with the application measurement, and an optional user-provided seed, is used to derive key material unique to each application. This guarantees that if the integrity of the application loaded onto the device has been tampered with, the correct keys needed for an authentication will not be generated. This allows for open-ended, flexible usage. Given the right application, the TKey can support use cases such as SSH login, Ed25519 signing, Root of Trust, FIDO2, TOTP, Passkey, and more. TKey is and always will be open source hardware and software. Schematics, PCB design and FPGA design source as well as all software source code can be found on GitHub. Please note: This is the end user version of the TKey. The end user version of the TKey has the FPGA bitstream locked down in memory, meaning that the FPGA bitstream can't be changed by t