USB-IF Launches USB Type-C Authentication Program
businesswire.com
businesswire.com
* Relies on 128-bit security for all cryptographic methods
* USB-IF selected DigiCert to manage the PKI and certificate authority services for the USB Type-C Authentication Program
The cynic in me thinks that having so many turing complete microcontrollers with not insignificant performance and storage is going to be the NSA and other spy agencies wet dream. You wouldn't plug a strange USB into your phone or computer but you'd probably plug a strange cable or charger around your office/house or off Amazon - and that's if you could even tell the difference at a glance.
What I'd like to see happen is that a consortium issues certificates that sign capabilities, rather than signing identities. Essentially the charger says "the UL/USB-IF/etc. has certified me up to 18W" as opposed to "Apple built me" which seems to be the logic the industry has been using prior to USB-C.
Countdown until device private key and certificate extraction is successful begins now.