19:48 <awygle> woah, when did we get a forum

19:48 <awygle> shows how much attention i pay

19:52 <awygle> did a decision ever come down about the ATECC chip?

19:53 <awygle> last i remember it was leaning towards "not using it"

19:59 <whitequark> yeah, no vendor who would actually manufacture it was interested in using it

19:59 <whitequark> and a lot of effort would need to go into PKI infra that could be better spent on other things

19:59 <whitequark> combined, these two more or less killed the idea

20:11 <ZirconiumX> ATECC?

20:11 <john_k[m]> atmel crypto ic

20:11 <ZirconiumX> Ah

20:13 <john_k[m]> whitequark: did they not want to accept pre-programmed parts? or something else?

20:13 <whitequark> pre-programmed parts?

20:13 <john_k[m]> ATECC, you'd need to send them pre-provisioned parts right?

20:15 <john_k[m]> sorry that statement is a bit abiguous, for a manufacturer to produce a board with an ATECC either you're have to provide them with a quantity of pre-provisioned ATECC ICs, or have the manufacturer provision them themselves

20:15 <john_k[m]> I was just curious what the vendors objected to

20:17 <whitequark> the plan was to do the latter, i specifically insist on *not* manufacturing *anything* for this project

20:18 <whitequark> that's why one would need PKI

20:18 <whitequark> and manufacturers didn't see the hassle worth the benefits

20:18 <john_k[m]> ah, one could always have a supplier like AVNet provision them for you, increases cost though

20:20 <john_k[m]> the manufacturer's side makes sense, it's something they're not good at

20:22 <whitequark> nope

20:22 <whitequark> the manufacturer would just give me a key

20:23 <whitequark> well, i guess you could ask avnet, but that wasn't the plan

20:23 <awygle> Microchip actually provisions shit themselves now

20:23 <awygle> In reasonable quantities but perhaps not quite _this_ low

20:23 <john_k[m]> awygle: huh, neat

20:23 <whitequark> the plan would be that the manufacturer would give me a pubkey, with a privkey that remains on their premises, and i authenticate using their pubkey

20:23 <whitequark> without any third parties

20:24 <john_k[m]> right, I don't know of a single board house that I would trust to understand or implement PKI of any sort

20:24 <john_k[m]> including Foxconn, etc...

20:24 <whitequark> they'd run code that i provide as a part of the whole $ glasgow factory thing

20:24 <john_k[m]> ah

20:24 <whitequark> the PKI would provide benefits solely to *them*

20:25 <whitequark> since they're the one who would need to ensure the returns are genuine

20:25 <whitequark> so if they fuck it up, that's solely their problem and not mine