[Applause]
thank you very much for being here I am
product manager of the car I'm going to
give a quick introduction to what is T
card and then on Turin Italy which are
what the developers 40 cars are going to
be in a hands-on approach and scope this
is supposed to be a very hands-on
workshop you can get your computer ready
we have key cards for you we have
Twitter's what you're less than 40
meters that's not enough you can maybe
so quick introduction to what is keep on
very quickly and then we can get on to
the hands on the workshop so this is
very steep it's 32 yeah she called
attorney stick out when we left on a
small car
[Music]
it's open source and it's running on
shall account what it's not it's not a
simple NFC tag that you that you would
use as a QR code or the name 15 that I
need
NFC it's actually a small computer key
card is an applet that runs on there
it's open source so you can check it you
can edit it and tweak it everywhere you
want for your own application and it
runs on very standard web hardware
actually all of you here you have to
have a card on yourself right now most
probably because every one of the and it
has a very high level of physical
security any be very expensive
physically to get private keys the key
card
we are providing here and the one we
produce the status that we've integrated
with instead of stairs as to type of
interfaces it was contactless with NFC
so that you can integrate with either
Android or iOS mobile applications and
it's also got a physical interface like
that meaning you can meet the materials
that we've distributed connected to
desktop application so that's key card
what can you build with key card it's a
hardware wallet so you can either
generate a secret within the card or you
can import a secret let's say the secret
is a sea
then you can make any derivation for any
prostitute on DC within the card and
then the card he's doing the trend the
second signature ECB is a signature of
the transaction at least capacitor part
so your application is passing once it's
set up and the secrets are here they
never leave the card and your
application is passing the transaction
to the hash of the transaction and and
passing that's what it does
why does it have security or Christie
it's air gaps it's offline that's not
where what is your project you'll never
leave and with intoxication provides the
other thing is price order of the
private keys an end user this is
tangible the private keys are here and
education lot of things most of us are
aware what it's all this top of my
wallet
sorry mobile or desktop well it is can
be used to store the keys for identity
systems this car is very convenient as
good right
users of our any identification so
that's what speaker than what you can
deal with it so we'd like this to be
hands-on suppose we just arrived you can
get some new cards and to connect them
to your your PC you need some inventive
readers we've already destroyed some and
they are not enough maybe you can
[Music]
I'm working
you might need two things
Tokaji console but tons of them everyone
can get one I mean let's make small
groups we've already readers our lease
without my mom here
the hobby is that way working because I
mean you don't know
[Music]
- trainees
I waited
it is never in the dark so you when you
are signing with the without polish the
signal will speak to the on the car
which really is a reminder of this
aspect and the communicator of the in
that car and the device that you're
using is encrypted
this is protocol that we implemented
above the standard communication
protocol it was the use case of this
kind of cars is you confuse the device
sales but in our case you can use except
any device so we have this a layer of
aluminum tops which protects many within
the vehicles even if they are quite hard
to convey out of the spend over
over the way and it also prevents random
device is sending omens with a car I
mean it as a team for example and you
could send three time the wrong pin it
cost a car it would be inconvenient if
ideologically hope doctor so if you
don't if you are authorized to even send
installation this one is done to park
sorry when so when you ship a true key
cards show is already installed
when double pistol it doesn't have any
secret because in Tel Aviv it was
intended to and it doesn't help the
painting toes which is needed to
increase the channel so it's really gone
and then with the installation phase
where you don't the still create a
wallet you just to define your own pin
through and creating hood which is this
way so we don't know the problem of the
in addition a separate envelope cord or
a scratch coat which can be abandoned in
your inference you do it yourself on
your audio device you say then there is
the key generation step and disconnected
in different ways because of course we
want people to be able to import the
emitter p9c sprays or for a Vedic system
is you can go the key see the binary
still just the keeper even without and
then you can stop sign is a sign it is
something that you can go only up to
drop arise with the B so this ends the
publisher pin like regular in the end
when you want to sign in
insert the beep and they take card since
the edge of the transaction transaction
because it doesn't make is not very
efficient first and second about doesn't
technically to show you the devalue so
it doesn't make any sense and then you
give us the signal repair and the port
and the device users can submit this
basically ok so in this sense the kicker
is one interface so yet so you can use
it with NFC and it's maybe the best way
to use
he used to be alive
solenoids and that means that you just
need to talk to be like right you just
need to top and it's easy to use
otherwise it's also contact so we
distribute now the USB reader and you
can just use it also in with a lot and
so we released like the Java so for
Android SDKs a months ago already in the
last weeks
we developed the u.s. sophisticated with
the newest us 13 it's possible like to
send a video hello
[Music]
yeah so so before yes 13 it was
impossible to send all the kinds of APD
with so many almonds it's being that you
needed and now it's possible so I think
the first application that was really
supports the kicker is gnosis that was
raised yesterday and also safe and
integrating like the tikka bizarre
two-factor authentication system and
thank you thank them because they helped
other development and so now if you want
to try something maybe doing something
mobile will be longer because we need to
[Music]
buy a pilot's and the points to the
phone so we also develop this kick-ass
CLI so we can basically try to use it
and see basically all the comments that
you can use to interact with the
kicker's from scratch to sign with
signature and signing the transaction
and then basically that the same concept
you can apply them
[Music]
so I took my things before so the first
one so this is the keycard outlets and
it's basically the software this is
finding the kicker and its resources
here it is I am salacious and train the
CLI says is within go and you can
[Music]
yeah okay so if you have the GST running
until the end you don't know that the
key card which dominancy right you can
just run ticket in focus and you
basically know like something about the
card gives you certain
so few can see here so it says if the
Outlands is resistant shall I fix it let
me see later but it's not useful yet so
we can use all the key card installed to
pay comments or we can use also you can
use the kicker shell comment and you can
justify or direct a list of comments and
in this specific case there's a list of
like video comments to install the
updates so when you receive the decals
of the blue key of it you can buy the
applet is already closed so you don't
need some of these I've gotta pick
something for the key and you want to
upgrade or install the updates or not do
something else you need this kind of
comments so that's another thing is it's
in a smart car you can also use so
multiple instances of the key cut so it
means that you can have
five different HD wallets along with a
different master key and then you just
select so in this case it's a if I run
this I also put right about here and you
can see all the video comments at the
same so they can you cannot have these
bytes that are basically sent to the
cards each one is a set of classified
[Music]
instruction by some parameters and some
data so in this case it's long because
it's like uploading the output and after
this you basically have this math curve
in the same state of the one that you
received when when you buy one so it's
restored a lot in choice which means
that it's ready to be used but it
doesn't have a second unit since the
running game like we won before so now
it says that
so now it's installed it's not
initialized meaning there's no steam
it's not ready to be paired with device
there's no key so there's no you ain't
and this just keep that it's used like
full of service solution so after this
are you trying something so it granny if
it's not working okay so
whatever saying when you know whenever
say I thought it's not ready to I mean
it's ready to be used but you need to
initialize it and this means basically
creating the signature so the secrets
that you have to use to to use it later
so in this case our so the first one is
the the pin the second one is the third
one is a parent password so in this case
if you want to do the same shell scripts
going to wrap this up all the scripts if
you want to secure saying comments you
know the you have obviously this one
thing that's here in the description the
first one
- still the office still the instrument
between just okay so this one has a hard
coded like path to the bell plaits the
little before changes so what it's an
arm right second script so this one is
basically and so he can sell in here if
I go back to install you can see that
the some comments there are starting
with GP another woody cancer to please
like means global platform since these
standards
communicate with received become manager
application on the card so is the one
that allows is building without this
from the cart and is independent from
it's implemented in the dark side
equity yes we - it's all set of comments
general to interact with monitored and
escape which is based because we use we
are not interacting yet with the King
adopted and then we have some key cards
so stuck even think of comments that are
basically just like replacing the X I
its composition and in this case like
selecting the outlets the keeper gotta
say what you said you can have like
wicked outlets and then like with these
updates something else something special
and then we send like the secret so we
can just for testing using this
otherwise you can just not specify
[Music]
and then he Kathleen eat which is
initialized so it's basically saying
okay so starting from now these are the
secret and you can use this card only if
you know deceiver and we prepared with
the password in you need to use the pin
for any signature example so okay so
after this
so the key card can be paired with five
devices five body but certain is that
every time you want to interactivity
card you need to pair them to be able to
start the pairing comments you need to
know the the pairing of this one so
preparing a password and after that you
can prepare then opening a secure
channel and then doing something so this
skill is basically not doing anything so
it's pairing open a secure channel and
then I'm paying and I'm doing this
unfair just because otherwise I
basically used one of the swats for the
parent
time you use another one another five
you know a bourbon in there and then I'm
just using verify thing because for some
comments verified opinion for example
before signing a transaction or in
general so of course when you you don't
need to pair every time you use the
kicker for example when you when you
have a lighter foundation we just felt
the first time and then with the pairing
essentially making a key and that key
you can store it in the phone and you
use it at the time so it's basically
once for each device that you want to
pair and yeah so these are scripted runs
this one is the number this and it's
just getting the stages of the same
thing that we had before so if it's
installed it's initialized and
everything and we can still the parent
which is the one gets really used
in session and then the pilots ride
so it I designed you so you can you can
put their own pitiful times otherwise
then you need to use the book to read
Isha lies the pain and so if we so at
this point the key card is initialized
but it doesn't tell the master key
so there's another comment that you use
which is generate the key and this one
is basically generating the key inside
the card and then which is basically
diversity there are the wage man so here
like a Misaki in the card majority on
the card
cuff but you can upload it or you cannot
blow they think the indexes of a pbs39
phrase and then the card is told in the
in the card and then you can start using
it so yeah you have any question also
like if you have problems
[Music]
it's not all the ships on the market
they support the course defined in the
Java car specification and so they
define the FP course and like the SEC
the Tongass for ATM yes because of the
policies of habit you know
[Music]
because of the I mean because before
this for months
something that didn't put accent is that
there is also a sort of acetyl channel
and it has a key the issue of nose
deceive what's the toy so when they sell
you the card you don't know the so you
cannot but is actually not really
I'm out this yep it with
the one that we distributed now so they
have the test keys the one blue that we
combine they have a different key but I
still know having things like the key
card keys offender I mean for the final
release maybe we would generate as no
random key so that it's possible to
change on your device remaining because
actually the Yubikey uses the same
protocol so the same communication
protocol so actually it's implementation
will be done for Java path but porting
this to the UPR clearly did something
which is no no question is programmed
with like mmm
he carved our personal
[Music]
[Applause]
I don't know so if you can use the same
applet on that card and if it's like
something over so so at least that you
can know that as far as I know we can't
extract the private key from the
Estonian citizenship program like the
government knows it but you can't damage
it so they are you can run but you
cannot play with the keys so is there a
ah this is secure element this basically
is what is useful
all this happens the applets are emitted
by the when the chips over it but a
model itself the key as we say the key
is fixed so it's actually a user notice
but then the user can change it so they
can change the key to load applets that
nobody else can they move towards
Columbus on their chart step so we don't
want to manage this centrally on our
side we want that the user has the
ability to load other oppressed them
what they what they won't be
okay do you have any other question okay
so now we came to the read the key so we
can still use the che comments and use
the script number five and it's
basically just doing the same that we do
before so it's selecting the applets
setting their secrets to be able to
pairing and open the secure channel
verified to be tipping so that because
it's it's like regenerating that the key
is already there this case it was empty
so it's generate the key and leather bag
so from this point you can start right
using it so you can sell
transactional sending data so one point
with the cart actually as a true random
number generator on board so generating
the Keystone cart is really secure okay
so yeah it's it's in the cheapest assess
if I do okay so now yes now there's the
kicad stein comment and it's basically
accepting like 32 bytes of data and the
descriptive like same thing an empty
life and the same the usual selecting
opening the secures channel verified
would be because it's required before
signing and then appendix so if I use it
and then do this so the output is giving
me like the signature
and what does the sign message which is
actually directing this Eli but it's not
really this case and then there's
another concept about the penis bath so
so every so now every time you want to
interact with a ticket you need to know
the parent password so the first time
you use it like the parent and then
every time you want to sign some data
you need to verify your pitch it's
always something that you get you need
to service your only you know the owner
of the garden the only one its opinions
so in general you you only used the
clicking with your own trust device we
can set a specific path of HD words that
can be used with an trusted device so
it's for many things so you can be
creative so we can be like just to open
the door yeah so the key that you're
actually using for your wallet when you
are still of
is all you can do something something
like paying point-of-sale and with the
risk of other experiment ahead but
basically these have just a few tokens
on the path in just a bit
let's visit so the way you do it is by
this set previous path Department and to
use it you need to of course pairing and
verify the pin and then you just pass
like the path of bass to what its people
to use and after this
[Music]
yes
okay so after this we we set with this
path in the stuff and basically what we
consume is timing so as you can see here
so the script is really into common so
one is just selecting and the other one
is like signing something and here so
the example is like these other things
and nothing that is another simple
example funky and an example is
basically doing everything and yes this
one just so if not developing by the
application this interacts with the CLI
can be useful so that you can easily
like restore inchaallah expansion to the
earth and everything and then the main
is basically the one for joy one for
advice and they basically have the same
common sense and inside the statists key
capture this so does the package of
Juniper Java and Android and then this
there's a bit more I'll I can try so
it's basically a Cena so the way it
works is like a lot of gels and then you
basically initialize a common sense and
then you basically have the same common
that we had before
is a method of the common separately so
selecting and then let's see if there's
something that it's really same so like
pairing and then gifting the individual
town so it it's based to to to read and
it's basically so if this day wants
basically preventing anything you need
to have study it's easily to copy it you
know sorry you mentioned I us what is
the status of virus yeah so let me also
[Music]
yes okay so before
[Music]
okay so saying so with the solar virus
13 which is the event they prevented
everything API the C core so you can
basically send a receive all the videos
so so so you can have a full interaction
and before that it was like only reading
the in-depth tag so it was only for you
know
[Music]
okay so there's this year kicker Swift
SDK and then there's an example
application the Moses repository and the
common set is basically the same jacket
ends with basically anything about your
common sense away and now I don't know I
mean we we saw everything so if you have
questions or if you want to play with
card with the CLI or if you want to
install the demo app for Android and iOS
and try to compile them the point and
we're here to help and there's a
question I never just speak up so I
missed the beginning of the
presentations are loud that it already
mentioned but overall it status keycard
compared to something like a dress or
one in security so in general compared
to the other our wallets so the keycard
us every cycle storage places it is the
same cigarette more or less the same
thing could elevate like the letter it
doesn't tempt additional part
controlling the screen and the Baptist
because it doesn't have a screen buttons
so it's very simple storage it is
inexpensive this and this standard
artwork so we the Pope one of the points
is that you we don't have a product to
sell and it is no that is
close the soul because and giving even
if it's open source the schematics we
still are not going to make it yourself
but these cards you can find them Israel
we bought these white cards and we
stopped the output so there can be many
different of this there can be endless
combinations with different features
multiple offers on the same card so from
a security point of view is the same
based basic of what is in a ledger the
same secure element of course you don't
have a screen and you don't have buttons
so it's a compromise you were to trust
the device we solved this in part by
implementing this secure channel
protocol which at least allows you to
pair with a specific device that you
want to use up to five so you don't have
random devices interacting with the card
the card as the advantage of being very
practical because every phone has an NFC
reader so compare the two USB solutions
they can be also used but it's not as
straightforward and it can be used also
with USB card readers which are also
quite common to find actually so it is
the second thing is for me to be
convenient and secure and for purpose
limits
that's my answer your question and also
products because it's like something
she that you came by yep it's easier to
buy five of your friends so I mean for
the physics on sorry that something's
kind of music on the security so there's
the software and the hardware itself not
very pretty open source so it's can be
edited and the hardware which is secure
elements is I mean these have accounts
usually certified meet the hardware prod
products these ones are from any speed
for instance from whom any speed yeah
which is one of the main supplier of
Java cause they are the Faro
certification program
this one is Yale a l5 + certified so
that follows a list of tests to test the
hardware security how hard it is with a
microscope with side-channel attacks to
get the secret out so the awkward price
themselves are qualified in country also
thank you you see the expensive how
expensive how inexpensive is a card yes
it really depends I mean like we were
seeing at the beginning
several parts are produced by millions I
mean there are in every phones and
everything that is a car so they can be
really inexpensive when you do volumes I
mean okay the question of the price is
more depending on your relationship with
your supplier yeah
but roughly I mean these things when you
manufacture a couple of thousands you
know couple of dollars and your
beautifies dollars for such an hour okay
it's quite simple is it possible to
source different form factors yeah I
mean then usually down these form
factors or they can be just this single
sim card without the antenna for phones
but some suppliers do rings some do
things that you can attach to physical
objects then it's settled
the guys that manufacture is up
to this so this the chip that is here
behind this is from one manufacturer and
the body of the car with their ten nice
meet by another manufacturer so this can
be even embedded in electronic devices
last question I was late can I still
have our either them think there are
more thank you it's a key
[Music]
it's not just today I always just gonna
ask about maybe batteries and like where
where can i source these in volume so
there are so different actors first you
need to find a chipset provider because
that manufacturer the cheaper per se so
downloads such a big number this is an
HP engineer and has been eating
something yeah
so though maybe and then you need to
find a manufacturer that's gonna do the
process that week they describe that
bias these chipset and then put them in
the physical card and this type of
scenario there are hundreds hundreds I
mean how self man factor we want Europe
New York France actually but there are
tons of guys that know how to create a
car and then the other thing you can
consider is the level of security
depending on what you download at the
factory level in the car the level of
security you want in a factory what we
choose to ourselves when we manufacture
that is that there's not any secret in
the car minions and so we don't want to
rely on the security of the manufacturer
or the process
the cars are initialized with the with
the with the phone
you intend to publish an application to
deter intercultural performing yes
establish quiet is implementing now
Akita and it is also so not statuses
from us of course and then there are
third-party application which also
integrates of the most is safe and
bullied then this one are released and
then there are people's writing system
cost the cost given a path because of
the operating system the operating
system no no the operating system is
developed by an XP or I don't know maybe
an XP buys it from someone else but they
have shipped already on that you bought
my sauce no no no this there is this
thing
so the Java card upland that we wrote is
fully open source and it can be
installed on any Java car on any java
craft OS platform but this specification
of the chips under NDA and we don't even
ever we don't you don't need to use it
and to rise is so always so they need
the specifications and so they are all
closed source by default and engine
there is no other way no no because if
you we have told that it's better to
make pinless interaction with the point
of sale because the point of sale is on
trust
so if you enter your field you are
giving you a secret - and a trusted
device so it's better to have a separate
wallet with as little funds and you know
it's cash money and we are thinking
about ways on how to mitigate trout
today's current things like this but at
least you don't give any secret it was
giving them in maybe you are giving also
pattern to your other pins and that's
are there any such chips on the market
or wherever in the world that are open
sourced out to the lowest level
unfortunately not
I'm having a close look to the base 5
initiative because actually this thing
is an article controller with a secure
storage and if you order our accelerator
for photography
the cool thing what make this secure why
an ARM chip is not securing this one is
is the topology of the transistor is
randomized so if you is all scaled let's
say so so if you take a microscope and
you open whatever in the cup in a
microcontroller you can see exactly okay
this is the ROM this is the roll
you open this one that you don't see
anything so it's so yeah I'm looking at
the risk by initiative because it could
be used at the basis but there is a lot
of development cost to bring the same
level of security so to make this really
important yes
[Music]
so you can in poverty but you cannot
make strategy all right even with
acetabular backup even with passport
there is a small image you can never
export the master key but that's the
master key generated on the cadre yes
yeah no but if you add this is crazy
already but if you have an expert box in
the API for some yes and I want to
display NIT export function allows its
port in public keys and private keys but
only under a specific sub tree as a
subtree which we have defined with a
which should not be used in this
application system but I think we are
going to remove it because actually the
better way is probably to use TC wallet
where you can just change a couple so
see the we need
you always have to war against God and
pray together
[Music]
[Applause]