Skip to content

feat: Teensy 4.1 M1 cryptographic foundation - #2

Draft
IFindMe wants to merge 19 commits into
mainfrom
feat/teensy41-m1-crypto
Draft

feat: Teensy 4.1 M1 cryptographic foundation#2
IFindMe wants to merge 19 commits into
mainfrom
feat/teensy41-m1-crypto

Conversation

@IFindMe

@IFindMe IFindMe commented Aug 12, 2026

Copy link
Copy Markdown
Owner

Summary

  • add exact Monocypher 4.0.3 dependency for X25519 and ChaCha20-Poly1305
  • add RFC 7693 BLAKE2s-256 implementation
  • add Teensy hardware entropy wrapper
  • add deterministic M1 crypto vectors and host BLAKE2s tests
  • add physical Teensy M1 self-test for X25519, BLAKE2s, AEAD, tamper rejection, and entropy

Security

  • no Tailscale auth keys or private production keys are included
  • X25519 rejects an all-zero shared secret
  • AEAD contexts are wiped after use

Next

M2 will implement Tailscale device identity and headless auth-key provisioning.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant