Vasu Garg
←all projects

ZeroBridge

public sourceSystems

Hardware-level automation engine and telemetry bridge that turns a Raspberry Pi Zero into a composite USB gadget (Keyboard, Mouse, Media keys, Serial, and Ethernet) for macOS. By interfacing directly at the physical USB layer, it delivers sub-millisecond control, remote lock/wake/unlock, and live host telemetry completely free from macOS accessibility popups and sandbox constraints.

Highlights

  • Single-Cable 5-in-1 Composite Gadget: Multiplexes physical USB keyboard, mouse, media keys, CDC-ACM serial, and CDC-ECM Ethernet over a standard USB OTG connection
  • Hardware-Level OS Sandbox Bypass: Controls macOS below GUI scripting and accessibility permission layers by interfacing as native plug-and-play USB hardware
  • Zero-Knowledge E2EE Architecture: Secures control and telemetry via ephemeral P-256 ECDH key exchange and AES-256-GCM encryption, keeping the Go relay completely blind to payloads
  • Biometric Passkey Authentication: Enforces passwordless WebAuthn (Touch ID / Face ID) access control gated by temporary 6-digit setup-code enrollment
  • Intelligent Tri-Channel Routing: Combines sub-millisecond WebSockets for window/screen geometry, high-frequency ACM serial for telemetry, and an SSH connection pool with automatic Wi-Fi failover

Stack

  • AES-256-GCM
  • CDC-ACM / CDC-ECM
  • Go
  • Linux USB Gadget (ConfigFS)
  • P-256 ECDH
  • Rust
  • Swift
  • USB HID
  • WebAuthn / Passkeys
  • WebSockets

Languages

  • Shell 33%
  • Rust 30%
  • HTML 16%
  • Go 15%
  • Swift 5%
  • JavaScript 0%

Activity

39 commits · updated last month

Components

Systems & Embedded Security

source ↗

Hardware-level automation engine and telemetry bridge that turns a Raspberry Pi Zero into a composite USB gadget (Keyboard, Mouse, Media keys, Serial, and Ethernet) for macOS. By interfacing directly at the physical USB layer, it delivers sub-millisecond control, remote lock/wake/unlock, and live host telemetry completely free from macOS accessibility popups and sandbox constraints.

  • Rust
  • Swift
  • Go
  • Linux USB Gadget (ConfigFS)
  • USB HID
  • WebAuthn / Passkeys
  • P-256 ECDH
  • AES-256-GCM
  • WebSockets
  • CDC-ACM / CDC-ECM