I'm working on a project in MCU (micro controller) environment with GPRS connection to exchange data securely with the cloud. The encryption algorithm has been selected to use AES.
I did some search on internet and figured out that ECDH key agreement protocol quite fits the requirements. The good news is that there are some security ICs that have built-in support of ECDH/ECDSA algorithms including secure hardware-based key storage. After digging into this further I learn that ECDH does not do authentication and thus is prone to MITM attacks. This is a very important issue that the system should address.
Can ECDSA be used to do the authentication? Will my system be secure enough with regard to e.g. MITM attacks using a combined ECDH and ECDSA solution?