URU Key - an ESP32 FIDO2 Authenticator

URU Key - an ESP32 FIDO2 Authenticator

Everything’s finally coming together! I combined the ESP32, fingerprint scanner, and ATECC508A security chip into a single board—the first real version of my own FIDO2 Authenticator: URU Auth (You Are You). It’s handheld, it lights up, and it’s so close to being fully autonomous. Time to tackle power and fingerprint recognition!

Read more...
Using ATECC508A Cryptographic co-processor with ESP32

Using ATECC508A Cryptographic co-processor with ESP32

Time to tackle the ATECC508A crypto chip! I started building an ESP32 component library to use it in my FIDO2 Authenticator. One chip gave me trouble, but another worked perfectly. Lots of I2C fun, ECC signatures, and some helpful inspiration from SparkFun’s Arduino library. One step closer to full hardware-based security.

Read more...
FPC1020A* Fingerprint Scanners

FPC1020A* Fingerprint Scanners

Finally got my hands on the FPC1020 fingerprint scanners! These things are tiny, SPI-based, and perfect for a built-in solution. I built test boards, hooked them up to a NodeMCU, and wrote a basic Arduino sketch to read the hardware ID. Next step: integrating with the main authenticator project!

Read more...
ESP32 Authenticator device - first prototype

ESP32 Authenticator device - first prototype

The PCBs finally arrived—couldn’t resist jumping straight into assembly. Hot air soldering the ESP32 Pico D4 was a first for me, but surprisingly satisfying! The prototype is up and running, even on battery power. Now the real challenge begins: fingerprint scanning and matching. Let’s gooo!

Read more...
ESP32 Authenticator - first prototype design

ESP32 Authenticator - first prototype design

Tried to go full DIY and desoldered the fingerprint sensor from the R300 module… but hit a wall—the pad layout doesn’t match any docs I could find 😕. So, switching gears: I’ve designed my own custom dev board for the authenticator with ESP32 Pico D4, ATECC508A, and room for a scanner. Boards are on the way!

Read more...
User Verification for WebAuthN

User Verification for WebAuthN

Using a button for FIDO2 user verification felt… a bit too easy to spoof. So I grabbed two fingerprint modules—GROW R300 and FPC1020—to try adding real biometric authentication. R300 might even let me skip its built-in MCU and handle image processing myself. Let’s see where this goes!

Read more...
WebAuthN on ESP32 development board

WebAuthN on ESP32 development board

After getting FIDO2 working on Android, I gave it a go on the ESP32. Started with Arduino, but switched to ESP-IDF for more control. It’s super stripped-down—only one in-memory credential and a button for user presence—but it works! Got both registration and login running. Video inside!

Read more...