USB Implementers Forum seeks to add cryptography standard to help authenticate, secure USB-C devices

In as much as USB-C might drive you nuts in terms of having to hunt down assorted USB adapters, you’re going to like this.
An upgrade to the USB-C standard allows cryptography to be used to authenticate connected devices. It will ensure that devices are properly certified, but can also be used to enhance security …
As of now, while USB charging points are being offered in public places, they can create a vulnerability if a bad actor replaced them with a device designed to deliver malware or have been swapped with counterfeit charger is used which fails to deliver the correct amount of power.

A new standard, known as “USB Type-C Authentication”, will ensure that the charger is genuine and
The new standard, known simply as USB Type-C Authentication, is being discussed by the USB Implementers Forum (USB-IF) will ensure that it is a genuine charger and can allow devices to be authenticated using either data or power delivery channels. This, in turn, means that a charger can be verified without opening up a data connection to a Mac or iPad.
The USB-IF said that with the design, authentication could take place immediately upon connection, prior to any type of device access being granted.
Per the USB-IF:
“USB Type-C Authentication empowers host systems to protect against non-compliant USB chargers and to mitigate risks from malicious firmware/hardware in USB devices attempting to exploit a USB connection. Using this protocol, host systems can confirm the authenticity of a USB device, USB cable or USB charger, including such product aspects as the capabilities and certification status. All of this happens right at the moment a connection is made – before inappropriate power or data can be transferred.”
“USB-IF is excited to launch the USB Type-C Authentication Program, providing OEMs with the flexibility to implement a security framework that best fits their specific product requirements,” said USB-IF President and COO Jeff Ravencraft. “As the USB Type-C ecosystem continues to grow, companies can further provide the security that consumers have come to expect from certified USB devices.”
It’s presently unknown as to whether Apple will adopt the protocol and companies which implement their own USB security policies on company-issued devices will be able to continue to do so.
Stay tuned for additional details as they become available.
Via 9to5Mac and BusinessWire