Solstice Software is a tiny security research "firm" (emphasis on the air quotes) which seeks to make a few ripples in the vast cybersecurity lake through independent security research, software engineering, and occasional consulting services.
It produces high-quality projects for public and private use of its own and that of others.
Solstice Software will always be:
- 🏃♂️ Active & Reachable: Drop a line any time at services[@]solstice.software.
- 📂 Open-Source: Proprietary software is really 1995. Projects work best when the greatest and most passionate minds freely collaborate.
- 🔍 Meticulous & Clean: Focused on detail and quality in all things, not just "where it counts".
- 📈 Innovating through R&D: It Just Works™️ is not good enough.
This section is occasionally updated to include interesting information about Solstice Software's latest endeavors.
"MFTAH" stands for Media For Tamper-Averse Humans. As its name suggests, it creates a media device containing one or more bootloaders, each using an encryption mechanism that make it resistant to subversive tampering.
Its acronym and "artwork" are both inspired by the Arabic word for "key".
This project was motivated by two desires:
- Is it possible to FULLY ENCRYPT an operating system, including its own bootloader?
- With a fully encrypted system and bootloader, can the Evil Maid attack be mitigated?
The answer to question 1 is a resounding Yes! This project is already working for primary Solstice Software development workstations and miscellaneous laptops (running various flavors of Linux).
The answer to question 2 has yet to be fully determined, and will require more red-teaming after project completion.
- The source to make the EFI application for booting.
- A full toolkit to create, decrypt, and modify MFTAH drives.
- GUI for Windows in C#.
- TUI for Unix systems in C (with ncurses).
- A host of CLI scripts to perform more detailed and careful MFTAH maintenance.
