search

meshtastic / firmware

Meshtastic device firmware
https://meshtastic.org
GNU General Public License v3.0
2.98k stars 714 forks source link

[Feature Request]: Security: Factory reset via hardware, such as detection sensor module or button #3240

Closed noon92 closed 3 months ago

noon92 commented 4 months ago

Platform

NRF52

Description

This would allow a hardware button or IO pin event to trigger a wiping of private data, with a focus on encryption keys and nodeDB, from storage.

One use case: a remotely placed repeater with a tamper detection mechanism that, upon detection of enclosure intrusion would wipe encryption keys, preserving the security of the mesh.

Currently, we have --factory-reset via serial. It should be easy to implement this via detection sensor, for example.

Additional functionality proposal: allow for a message to be sent to the primary channel (or a specific node) before wiping data. Example:

  1. Via some kind of sensor, enclosure intrusion (or movement of enclosure) is detected.
  2. An alert bell is sent to the primary channel (or a specific node): "TAMPER detected, wiping memory".
  3. After a timeout of say 10 seconds or after ACK, firmware wipes.
GiuStel commented 4 months ago

I agree with @nagumii , an hardware triggered factory reset (or personal data wipe) would be a great feature in order to protect from thefts.

garthvh commented 4 months ago

This is already possible using the serial module if someone wants to mock up a prototype, factory reset is an admin message

noon92 commented 4 months ago

Yep, I will by trying an implementation of this with a small arduino board. Thanks

On Thu, Feb 29, 2024 at 5:10 AM Garth Vander Houwen < @.***> wrote:

This is already possible using the serial module it someone wants to mock up a prototype, factory reset is an admin messahe

— Reply to this email directly, view it on GitHub https://github.com/meshtastic/firmware/issues/3240#issuecomment-1970317611, or unsubscribe https://github.com/notifications/unsubscribe-auth/AJXK4IXWTABPNOKFJVJTYODYV7WTVAVCNFSM6AAAAABDNKOAMSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSNZQGMYTONRRGE . You are receiving this because you were mentioned.Message ID: @.***>

garthvh commented 3 months ago

Looking forward to seeing the prototype, we can re-open this if there is anything needed in the firmware, but this is a perfect serial module use case!