Recommended SOC Deployments
Raspberry Pi 5 + Zymbit SCM
While historically relegated to hobbyists, the Pi 5 incorporates dedicated hardware cryptographic extensions natively supporting AES-NEON-BS. Augmenting this with a Zymbit Secure Compute Module (SCM) introduces an autonomous Hardware Security Module (HSM) that monitors physical tampering, encrypts the file system autonomously, and transforms a vulnerable SBC into a physically hardened edge appliance.
Under the Hood Architecture
Hardware Cryptography
The BCM2712 chip possesses AES acceleration. Enabling the kernel crypto API drops AES-256 operation time massively, allowing LUKS2 full-disk encryption without crippling CPU overhead for SOC tasks.
Secure Boot & OTP
Utilizes One-Time Programmable (OTP) memory. Executing revoke_devkey=1 permanently locks the SoC into signed boot mode, rejecting unauthorized OS swaps forever.
Real-World Attack Surface
Bootloader Flashing & SPI Extraction
If not secured via OTP, attackers with physical access can dump EEPROM using basic hardware tools and flash malicious bootloaders to bypass OS authentication.
GPIO Pin Hijacking
The 40-pin header provides direct logic-level access to UART/I2C/SPI. Attackers can interface directly to extract encryption keys currently in memory or manipulate telemetry.
Mandatory Hardening Baseline
- SD Card Read-Only: Mount root filesystem as read-only, utilizing tmpfs for volatile directories to prevent rapid flash corruption.
- OTP Secure Boot: Embed public key hash into EEPROM and enforce secure boot mode permanently to lock out tampering.
- Physical Pin Protection: Desolder or block unused GPIO headers and enclose the unit in tamper-evident resin (Zymbit).
Security Pros & Cons
| Architecture | Security Pros | Security Cons |
|---|---|---|
| BCM2712 AES Extensions | 400% acceleration for LUKS2 & VPN | Requires manual kernel module setup |
| OTP Secure Boot | Hardware lock prevents unauthorized OS | Loss of private key permanently bricks board |
| Zymbit SCM Integration | Physical tamper sensors, independent HSM | Limits GPIO flexibility, increases BOM cost |
