Home

Welcome to the USB armory wiki.

The USB armory from WithSecure Foundry is an open source hardware design, implementing a compact secure computer.

Purchasing

See Ordering information for USB armory Mk II variants, accessories and purchase options.

The USB armory Mk II can be purchased at the following resellers:

• Mouser
• Crowd Supply
• Hackerwarehouse
• HackmoD

Custom/bulk order inquiries can be placed directly by contacting usbarmory@withsecure.com.

Documentation

• Getting started
• Preparing a bootable image
• Host communication
• Applications
• Frequently Asked Questions (FAQ)
• Application repositories
  • INTERLOCK file encryption front-end
  • Crucible - OTP fusing tool
  • Crucible - Secure Boot utility
  • Serial download tool
• Operating Systems
  • Precompiled images
  • Debian image preparation
  • TamaGo
• External resources

The following sections provide information specific to each USB armory model.

USB armory Mk II

• Specifications

  • RAM: 512 MB or 1 GB DDR3
  • Internal storage: 16 GB eMMC
  • Secure elements: NXP SE050, Microchip ATECC608B
  • LAN model:
    • SoC: NXP i.MX6UL/i.MX6ULL ARM® Cortex™-A7 528/900 MHz
    • Ethernet: 10/100-Mbps with IEEE 802.3af Power over Ethernet
    • USB 2.0 over USB-C: DRP plug
  • USB model:
    • SoC: NXP i.MX6UL/i.MX6ULZ ARM® Cortex™-A7 528/900 MHz
    • External storage: microSD slot
    • Bluetooth module: u-blox ANNA-B112 BLE
    • USB 2.0 over USB-C: DRP receptacle + UFP plug

• Datasheet

• Bill of materials: LAN β, USB γ, USB β

• Security features

• Secure boot

• Benchmarks

• Power consumption

• Internal Boot ROM

• Enclosures

• JTAG

• Debug accessory

• Boot modes

• Bluetooth

• I²C

• Cryptography co-processor drivers: DCP (i.MX6ULZ/i.MX6ULL), CAAM (i.MX6UL)

• Hardware control tool: armoryctl

• Errata

TamaGo - pure Go bare metal unikernels

• USB encrypted drive: armory-drive
• OpenPGP/U2F/age smartcard: GoKey
• Trusted Execution Environment w/ TrustZone: GoTEE
• Transparency Witness Network: ArmoredWitness
• USB Mass Storage interfacing: armory-ums
• Secure primary boot loader: armory-boot
• Example application: tamago-example

USB armory Mk I

• Specifications
  • SoC: NXP i.MX53 ARM® Cortex™-A8 800 MHz
  • RAM: 512 MB DDR3
  • Storage: external microSD
  • USB 2.0 over Type-A: OTG plug
• Bill of materials
• Security features
• Secure boot
• Secure boot (with NXP tools)
• Host adapter
• Device communication (stand-alone mode)
• Benchmarks
• Power consumption
• X-ray
• Internal Boot ROM
• Enclosures
• JTAG
• Using the breakout header: Serial, GPIOs, I²C, SPI
• Cryptography co-processor driver: SCCv2 (i.MX53)
• Errata

Note

The USB armory Mk I reached End-of-life (EOL) and is no longer available.

How to Contribute

Get a USB armory board and start developing!

A list of project ideas is available in the Applications section.

A discussion group is available on Google Groups.

Support

If you think anything is missing on this wiki, or require further support, please email us at usbarmory@withsecure.com.

License

USB armory | https://github.com/usbarmory/usbarmory
Copyright (c) WithSecure Corporation

This is an open hardware design licensed under the terms of the CERN Open Hardware Licence, see board revision source directories for applicable versions.

This source is distributed WITHOUT ANY EXPRESS OR IMPLIED WARRANTY, INCLUDING OF MERCHANTABILITY, SATISFACTORY QUALITY AND FITNESS FOR A PARTICULAR PURPOSE.

Terms of Use and Compliance information

The following Terms of Use apply to USB armory boards manufactured by Inverse Path and/or F-Secure and/or WithSecure and sold directly or through one of its resellers.

IMPORTANT – BEFORE INSTALLING OR USING THE USB ARMORY BOARDS MANUFACTURED BY INVERSE PATH AND/OR F-SECURE AND/OR WITHSECURE, CAREFULLY READ THE BELOW TERMS OF USE (”TERMS”). BY OPTING TO ACCEPT, BY INSTALLING OR USING THE USB ARMORY YOU (EITHER AN INDIVIDUAL OR AN ENTITY) WARRANT THAT YOU HAVE READ THESE TERMS, UNDERSTAND THEM AND AGREE TO BE LEGALLY BOUND BY THEM. IF YOU DO NOT AGREE TO ALL OF THE TERMS, DO NOT INSTALL OR USE THE USB ARMORY.

• Terms of Use
• Compliance information