Have any devices been released which protect against BadUSB attacks?
I'm particularly interested in buying a USB hub which has the following protections:
- The USB hub itself won't allow reflashing of its own firmware or will at least require new firmware updates to be signed with a strong cryptographic key (>2048bits RSA).
- The USB hub will not allow firmware write commands to devices connected to it.
- The USB hub will have single or dual/purpose ports:
- "Block device" ports which only allow devices plugged in here to act as block devices.
- "Keyboard" ports which only allow devices plugged in here to act as a keyboard.
- "Mouse" ports which only allow devices plugged in here to act as a mouse.
- "Keyboard/Mouse" devices which allow devices plugged in here to act as both a keyboard and a mouse, think a hybrid keyboard/mouse combo.
- "Other" ports which allow things to be anything other than a block device, keyboard, or mouse. Think Bluetooth dongles, cameras, microphones, etc.
Have there been any hardware devices which do something similar to this to defend against BadUSB?