4. Protecting GPG Keys with a Trusted Platform Module | BeagleBone for Secret Agents

Sign In Start Free Trial

Book Overview & Buying
Table Of Contents
Feedback & Rating

BeagleBone for Secret Agents

By : Joshua Datko

4 (2)

BeagleBone for Secret Agents

4 (2)

By: Joshua Datko

Overview of this book

If you have some experience with the BeagleBone or similar embedded systems and want to learn more about security and privacy, this book is for you. Alternatively, if you have a security and privacy background and want to learn more about embedded development, this book is for you. You should have some familiarity with Linux systems and with the C and Python programming languages.

Preface

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Free Chapter

1. Creating Your BeagleBone Black Development Environment

1. Creating Your BeagleBone Black Development Environment

Introducing the BBB

Creating an embedded development environment with Emacs

Finding additional background information

Summary

2. Circumventing Censorship with a Tor Bridge

2. Circumventing Censorship with a Tor Bridge

Learning about Tor

Installing Tor on BBB

Understanding Tor exit policies

Setting bridge-specific settings

Starting your new Tor bridge

Enabling port forwarding

Adding physical interfaces to the bridge

Determining your bandwidth with speedtest-cli

Controlling the bridge with the Stem library

Connecting to your obfuscated bridge

Continuing with Tor-related projects

Summary

3. Adding Hardware Security with the CryptoCape

3. Adding Hardware Security with the CryptoCape

Exploring the differences between hardware and software cryptography

Touring the CryptoCape

Discovering the I2C protocol

Understanding the benefit of cape EEPROMs

Creating an eLinux wiki site

Keeping time with a real-time clock

Trusting computing devices with a Trusted Platform Module

Providing hardware authentication with ATSHA204 and ATECC108

Encrypting EEPROM data with the ATAES132

Combining the BBB with an ATmega328p

Building a two-factor biometric system

Summary

4. Protecting GPG Keys with a Trusted Platform Module

4. Protecting GPG Keys with a Trusted Platform Module

History of PGP

Developing a threat model

Generating GPG keys

Protecting your GPG key with a TPM

Adding the keypad

Taking ownership of the TPM

Extending a PCR

Unlocking your key at startup

Iterating on the threat model

Summary

5. Chatting Off-the-Record

5. Chatting Off-the-Record

Communicating Off-the-Record – a background

Installing BitlBee on the BeagleBone

Adding OTR to your BitlBee server

Marshalling your IRC connections with a Bouncer

Extending the project

Summary

A. Selected Bibliography

Chapter 1

Chapter 2

Chapter 3

Chapter 4

Chapter 5

Index

Index

Customer Reviews

4 (2)

5 star

50%

4 star

0

3 star

50%

2 star

0

1 star

0

Generating GPG keys

First, we need to install GPG on the BBB. It is mostly likely already installed, but you can check and install it with the following command:

sudo apt-get install gnupg gnupg-curl

Next, we need to add a secret key. For those that already have a secret key, you can import your secret key ring, secring.gpg, to your ~/.gnupg folder. For those that want to create a new key, on the BBB, proceed to the upcoming section.

Note

This project assumes some familiarity with GPG. If GPG is new to you, the Free Software Foundation maintains the Email Self-Defense guide which is a very approachable introduction to the software and can be found at https://emailselfdefense.fsf.org/en/index.html.

Generating entropy

If you decided to create a new key on the BBB, there are a few technicalities we must consider. First of all, GPG will need a lot of random data to generate the keys. The amount of random data available in the kernel is proportional to the amount of entropy that is available. You...

Search

Your notes and bookmarks