DEF CON 34 · United States · 2026
Independent CH32V003 bare-metal UART crypto-puzzle badge offered toward DEF CON 34
K Badges' maker-controlled Tindie listing identifies Ouroboros as a $29.99 bare-metal RISC-V-assembly electronic badge on a CH32V003, with a custom UART cryptographic puzzle, a 12-LED Charlieplexed matrix, a circular single-layer PCB with exposed traces, and a hand-soldered two-AA configuration. Its August 4, 2026 storefront snapshot is out of stock; the seller says a new order is coming and hopes to bring some to DEF CON, rather than confirming units, arrival, pickup, or delivery. In a first-person r/Defcon announcement, the maker says they created the project and links the Tindie page and a GitHub technical explainer, while separately offering to arrange a DEF CON pickup by email for Tindie buyers. The product also makes 115200-baud puzzle, cryptographic-framework, low-power, and performance statements, but neither the product nor the maker-linked generic AVR framework establishes a released matching CH32V003 firmware or hardware package. This is a source-backed independent pre-event maker offering, not an official DEF CON badge, registration credential, confirmed fulfillment, verified cryptographic implementation, hardware-safety record, or reusable-image source.
People
The Tindie product page identifies K Badges / mytechnotalent, while the maker's announcement and linked GitHub material establish a narrow public maker, seller, and technical-archive-publisher relationship. This does not infer a real name, manufacture, completed fulfillment, DEF CON organizational role, cryptographic authorship, or image-reuse authority.
SourceOuroboros captures a current small-run BadgeLife offering with unusually specific maker-described physical and software surfaces, while keeping the distinction between direct maker claims, an adjacent generic framework, and a released badge build package intact. It also records a sold-out storefront and tentative event-replenishment statement without turning either into a completed distribution or organizer affiliation.
The maker's product page lists a CH32V003, a custom 12-LED Charlieplexed matrix, a single-layer circular PCB with exposed traces and no protective enclosure, and a hand-soldered two-AA battery configuration; it further claims 16 KB flash and 2 KB SRAM for the controller. No reviewed source publishes a schematic, BOM, PCB/Gerbers, board dimensions, component or LED part numbers, battery chemistry or holder, voltage/current limits, regulator or protection design, connector/pinout, assembly/test procedure, final revision, runtime measurement, environmental limits, safety guidance, compliance evidence, or production-versus-documentation parity. The seller's broad runtime and physical-performance language is not treated as a measured power or safety specification.
The maker describes a pure/bare-metal RISC-V assembler project on the CH32V003 with a custom UART terminal game at 115200 baud; the product calls the narrative experience fourteen stages and names Davies-Meyer, SPECK-128/256, a constant-time MAC, and an 8 MHz low-power mode. These are maker-described implementation and performance/security claims, not independent validation. The product-linked How It Works PDF is an explanatory artifact, while the linked ouroboros repository describes a distinct bare-metal AVR-assembly authentication framework for an ATmega328P and carries GitHub's Other license designation. No reviewed source releases matching CH32V003 badge firmware, a binary, build/flash/recovery instructions, test vectors, a hardware package, an applicable open-source license, or a security review.
The maker calls the project Ouroboros and frames its UART experience around an Ouroboros Protocol story. Their r/Defcon post places the announcement in the DEF CON summer-camp period, links the maker storefront and technical explainer, and says Tindie buyers may contact the maker to arrange a DEF CON pickup and shipping refund. The currently sold-out product page says only that a new order is coming and the maker hopes to bring some to DEF CON. Together these are independent maker association and acquisition-intent statements, not proof of final stock, handoff, seller venue authorization, DEF CON organizer affiliation, official issuance, or conference access.
Lifecycle
The seller names a CH32V003, 12-LED Charlieplexed matrix, single-layer circular board with exposed traces/no protective enclosure, hand-soldered two-AA configuration, and a 16 KB flash / 2 KB SRAM claim. It does not publish a circuit, parts list, board files, dimensions, battery chemistry, voltage/current limits, power or protection design, component values, assembly/test method, safety guidance, or measured runtime.
SourceThe product and maker post describe bare-metal/pure RISC-V assembly on CH32V003 and a custom UART puzzle at 115200 baud; the product describes fourteen stages, Davies-Meyer, SPECK-128/256, a constant-time MAC, and an 8 MHz low-power mode. These claims do not substitute for matching released firmware, binaries, build or flash instructions, test vectors, benchmark method, security review, recovery process, or proof that any shipped unit matches the description.
SourceThe K Badges Tindie page displays a $29.99 price and an out-of-stock state, says a new order is coming, and says the maker hopes to bring some to DEF CON. The maker's Reddit post separately offers to arrange pickup/refund shipping for buyers. Neither source proves inventory, production completion, payment acceptance, arrival, pickup scheduling, handoff, shipping, refund, support, or delivery.
SourceThe product links an Ouroboros How It Works PDF and a GitHub repository. The repository describes a distinct AVR-assembly ATmega328P authentication framework and GitHub marks its license field Other; it is not a released CH32V003 badge firmware, board, build package, or clear license grant. The linked PDF similarly does not establish a reusable media or source license.
SourceOperational history
The catalogue does not characterize the badge as secure, audited, reproducible, open source, performant, or suitable for a security-sensitive purpose solely from maker marketing or an adjacent framework.
The record does not turn a maker-described bare board and battery arrangement into a safe-use instruction, a battery-life guarantee, or a universal hardware-compatibility claim.
The catalogue classifies Ouroboros as an independent BadgeLife offering tied to maker intent, not an official conference credential, organizer-issued badge, or access item.
The record remains source-backed and image-free rather than copying storefront photos, Reddit media, GitHub PNG/PDF material, screenshots, placeholders, or generated approximations.
The catalogue preserves dated seller and maker intent without representing the item as available, delivered, or confirmed for DEF CON.