Sign In Start Free Trial

Book Overview & Buying
Table Of Contents
Feedback & Rating

BeagleBone for Secret Agents

By : Joshua Datko

4 (2)

BeagleBone for Secret Agents

4 (2)

By: Joshua Datko

Overview of this book

If you have some experience with the BeagleBone or similar embedded systems and want to learn more about security and privacy, this book is for you. Alternatively, if you have a security and privacy background and want to learn more about embedded development, this book is for you. You should have some familiarity with Linux systems and with the C and Python programming languages.

Preface

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Free Chapter

1. Creating Your BeagleBone Black Development Environment

1. Creating Your BeagleBone Black Development Environment

Introducing the BBB

Creating an embedded development environment with Emacs

Finding additional background information

Summary

2. Circumventing Censorship with a Tor Bridge

2. Circumventing Censorship with a Tor Bridge

Learning about Tor

Installing Tor on BBB

Understanding Tor exit policies

Setting bridge-specific settings

Starting your new Tor bridge

Enabling port forwarding

Adding physical interfaces to the bridge

Determining your bandwidth with speedtest-cli

Controlling the bridge with the Stem library

Connecting to your obfuscated bridge

Continuing with Tor-related projects

Summary

3. Adding Hardware Security with the CryptoCape

3. Adding Hardware Security with the CryptoCape

Exploring the differences between hardware and software cryptography

Touring the CryptoCape

Discovering the I2C protocol

Understanding the benefit of cape EEPROMs

Creating an eLinux wiki site

Keeping time with a real-time clock

Trusting computing devices with a Trusted Platform Module

Providing hardware authentication with ATSHA204 and ATECC108

Encrypting EEPROM data with the ATAES132

Combining the BBB with an ATmega328p

Building a two-factor biometric system

Summary

4. Protecting GPG Keys with a Trusted Platform Module

4. Protecting GPG Keys with a Trusted Platform Module

History of PGP

Developing a threat model

Generating GPG keys

Protecting your GPG key with a TPM

Adding the keypad

Taking ownership of the TPM

Extending a PCR

Unlocking your key at startup

Iterating on the threat model

Summary

5. Chatting Off-the-Record

5. Chatting Off-the-Record

Communicating Off-the-Record – a background

Installing BitlBee on the BeagleBone

Adding OTR to your BitlBee server

Marshalling your IRC connections with a Bouncer

Extending the project

Summary

A. Selected Bibliography

Chapter 1

Chapter 2

Chapter 3

Chapter 4

Chapter 5

Index

Index

Customer Reviews

4 (2)

5 star

50%

4 star

0

3 star

50%

2 star

0

1 star

0

Extending a PCR

We'll need to extend a PCR so that we can encrypt our GPG key. We'll arbitrarily choose PCR number 9. First let's view the PCR status to be sure that it is blank:

cat /sys/class/misc/tpm0/device/pcrs | grep PCR-09

This should return the current state of the PCR, which without using secure boot is:

PCR-09:00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Now, run the getgpgpin program from the following section. You should see the LED turn green on the CryptoCape and you have 10 seconds to enter a five-digit pin. Each time you press a key, the LED should briefly flash and when five digits have been entered, the LED will turn off. After 10 seconds, the getgpgpin program will silently exit. If you compiled the program with #define DEBUG set to 1, you should see something like this:

54321
(Line 53, extend_pcr)  Create a Context
 returned 0x00000000. Success.
(Line 55, extend_pcr)  Connect to TPM
 returned 0x00000000. Success.
(Line 59, extend_pcr)  GetTPM...

Search

Your notes and bookmarks