Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [embedded]

An embedded system is a computer system with a dedicated function within a larger mechanical or electrical system, often with real-time computing constraints.

0
votes
0answers
25 views

SOTA updates in combination with a Trusted Platform Module

I am quite new to cryptography and security related stuff. We are working on a new project with Embedded Linux on the BeagleBone Black. We wish to implement a full root of trust during boot up using ...
2
votes
2answers
48 views

Break large exponent calculation into smaller calculations?

I am implementing SRP on an embedded platform. It has crypto acceleration and I am using its built in modular exponentiation function, however it doesn't seem to be able to handle an exponent over 32 ...
5
votes
3answers
668 views

Lightweight cipher using only 8-bit operations

What is the most efficient (in cycles per byte) cryptographically secure symmetric cipher to implement using only 8-bit operations? Algorithms like TEA are great for embedded devices, but it is ...
4
votes
1answer
92 views

How is the inter and the intra distance of a PUF calculated?

I was wondering, if I want to calculate the intra distance of a PUF, and I have already measured $n$ times a response to a challenge. Do I choose one reference value and compare the hamming distance ...
2
votes
0answers
115 views

Is AES CBC + truncated SHA-256 MAC a good design for embedded sensor networks?

I'll start off by saying I'm a noob with respect to software security but I've been reading about security models for a while. Also, I'm afraid some people would just say "go and hire a security ...
0
votes
2answers
358 views

Why is a certificate needed at client side

I was wondering why you need a certificate of the server at client side. Can't you just fetch it from the CA itself? I am using mbedtls to program some small client, and in all the client examples ...
4
votes
1answer
315 views

Does still make sense to use SHA1?

I'm working with Arduino and hash-based signatures which are signature schemes that use only hash functions. Due to the constraints of an Arduino I was thinking about using SHA1 as the underlying ...
4
votes
1answer
547 views

BN-Curves for 256-bit symmetric security

I'm just studying the purpose of BN-Curves and I am interested in a setting for a 256-Bit security. So could you tell or link me to any information about this? are BN-Curves efficient for this ...
5
votes
1answer
243 views

Storing a Secure Boot image with AES-GCM instead of AES + RSA signature

In Secure Boot (here defined as data is encrypted and authenticated), we can encrypt the data with AES-128 and authenticate it with a RSA signature, computed over the data's hash, afterwards. On boot,...
5
votes
1answer
223 views

Combination of TLS_PSK and TLS False Start

I am evaluating the use of TLS 1.2 for a low powered embedded environment. After looking at RFC 7925 (TLS for IoT) I was wondering if the combination of the TLS_PSK_WITH_AES_128_CCM_8 cipher suite (...
6
votes
1answer
267 views

Signing dynamic data on an embedded system

I have built a GPS based on the AVR microcontroller. The GPS is used to log flight data for competitions. The log file is updated 10 times per second. What I'd like to do is to associate a signature ...
5
votes
0answers
336 views

Tiny Firmware Authentication

I am developing a product based on the NXP LPC11C24 microcontroller. It will communicate with PC software to perform its function. I am attempting to build in secure firmware update functionality. The ...
7
votes
1answer
1k views

Replay attack prevention in connectionless UDP encrypted communication

What are the options for replay attack prevention when two parties exchange UDP messages. No connection or session is estabilished. Communicating parties have pre shared key that is used for ...
0
votes
1answer
120 views

How to implement access control for Automotive Embedded Systems using mbedTLS?

I am trying to implement a security access scheme for Automotive Embedded Systems.I need to be able to generate a Random number(of my desired length), combine it with some secret data to send a Seed/...
2
votes
1answer
482 views

How to handle entropy and CTR DRBG for TLS on embedded system?

I am trying to use mbedTLS on a STM32-Nucleo microcontroller (STM32F746). The TLS library wants a RNG function (naturaly), the STM32 has a hardware RNG verified according to NIST SP 800-22. The ...
6
votes
1answer
267 views

Least-weak way to authenticate using only AES ECB/CBC

I have an embedded application that needs to occasionally get secure updates from a server. The only crypto library I have available for the chip is an AES-256 cipher (ECB and CBC, encrypt/decrypt). ...
1
vote
0answers
116 views

Encrypted comms between devices on LAN

I'm trying to encrypt a protocol that shares data between devices on a local area network (i.e.no connection to the internet). I don't want to use predefined keys because they're too easy to read from ...
2
votes
1answer
288 views

Encrypting and Authenticating The Simplex Communication Between Embedded Devices

I am planning to build temperature sensor nodes for my home heater control. Central device will control the heater using temperature data read by nodes. These nodes will send temperature data to ...
1
vote
0answers
515 views

Is there a fast implementation of RSA for Microcontrollers?

Zhe Liu, Johann Großschädl, and Ilya Kizhvatov. "Efficient and Side-Channel Resistant RSA Implementation for 8-bit AVR Microcontrollers" describes a fast implementation, but only contains a sketch of ...
3
votes
1answer
42 views

What communications security protocols exist that aren't based on PKC?

Lets say that you have two devices that need to communicate in a secure manner. These devices can share secrets before communication takes place (This sharing of secrets occurs over another secure ...
1
vote
1answer
795 views

Storing a secure key in an embedded device's memory

I am working on an embedded device which send/receive data and stored them in ciphertext mode (encrypted mode ). Now what's best approach for storing Keys (I used ARM CORTEX M series MCU) ? Storing ...
3
votes
1answer
554 views

How to enforce data privacy, integrity and authenticity of distributed firmware images for an embedded device?

I'm developing a bootloader for an embedded device, with which it should be possible for customers (i.e. device owners) to update the device's firmware. It is required that: the firmware is ...
3
votes
1answer
155 views

Is there an existing AE protocol with forward secrecy for embedded devices?

I'm working on an embedded device that is connected to a computer over an untrusted channel. According to my threat model I need authentication and encryption on the wire with perfect forward secrecy. ...
5
votes
2answers
916 views

Is there a secure source of entropy on a typical microcontroller?

On a device that does not have a hardware RNG, what is the best source for entropy? Some options and pitfalls floating around: Use the ADC to read something analog: can become deterministic if ...
4
votes
3answers
2k views

Fast PKI for embedded device

We are creating a device with a small microcontroller (20 MHz CPU 16 KiB RAM). We need some way to securely send signed files to device (only signature, no encryption necessary). An external company ...
0
votes
0answers
72 views

What crypto scheme should I use on embedded m2m system with assymetric uplink/downlink bandwidth?

I am working on implementing info security into custom m2m radiolink communication system, which has some restrictions: MCU based endpoint can transmit to gateway with packets max 16 bytes long, and ...
4
votes
3answers
772 views

secure embedded/microcontroller crypto using AES-ctr with hmac-sha2

The embedded device is a low-power 8-bit microcontroller (memory usage is constrained to about 10kb code, 1kb ram). As the device is battery-powered and manual service should be minimal, more powerful ...
5
votes
2answers
711 views

Is my id obfuscation algorithm secure?

I'm designing an id obfuscation system. My system includes: Embedded chips, each chip has a unique 32-bit address (id). Server Insecure low-bandwidth unstable one-way channels from the chips to the ...
3
votes
1answer
143 views

Client authentication on limited hardware

I'm developing a authentication and authorization protocol for a Bluetooth device. The device should communicate with an Android app and needs to be able to authenticate the app during the connection ...
1
vote
0answers
113 views

Factorization or discrete logarithm is difficult for an attacker?

I have read that difficulty in breaking many algorithms are based either on Factorization or discrete logarithm. I am reading about schemes that are similar to RSA which make use of integer ...