Questions tagged [embedded]

An embedded system is a computer system with a dedicated function within a larger mechanical or electrical system, often with real-time computing constraints.

Filter by
Sorted by
Tagged with
0 votes
0 answers
30 views

Authenticating a device for remote motor control [migrated]

I'm looking for a standard solution to the following problem. I've been unable to find how something like this is normally accomplished. Even a key word that points me in the right direction would be ...
safety_motorhead_19's user avatar
5 votes
2 answers
189 views

Authenticated encryption scheme for one-way radio telemetry

I'm designing an authenticated encryption scheme for a noninteractive one-way radio telemetry system. A number of devices in the field send back telemetry to a base station periodically, but no ...
Polynomial's user avatar
  • 3,527
1 vote
0 answers
64 views

Different ways to implement NTT in FHE, confusion about CT/GS butterflies

I'm looking at document of SEAL and openFHE, and they both use $\mathrm{NTT}^{\mathrm{CT}, \psi_{rev}}[\text{no to bo}]$ and $\mathrm{INTT}^{\mathrm{GS}, \psi_{rev}}[\text{bo to no}]$, 2 kinds of ...
Daisy Ding's user avatar
1 vote
0 answers
112 views

Performance of elliptic curve Diffie-Hellman vs NIST-PQC finalist KEMS

I am looking for performance measurements in cycle counts for an implementation of the elliptic curve Diffie-Hellman for curve, ed25519. Ideally, the cycle counts ...
cryptobeginner's user avatar
3 votes
1 answer
158 views

DIY TRNG on an embedded system for Ethereum private key generation

I'm trying to build this Ethereum hardware wallet on a custom designed embedded system and I'm no expert. Googling around I found this Robust, low-cost, auditable random number generation for embedded ...
Diego Hernandez Herrera's user avatar
1 vote
1 answer
364 views

Encryption of small data with fixed key and incremental IV

I have a Bluetooth device that sends a small package periodically (without receiving). I want to encrypt and authenticate the data using AES-128. It has an embedded random and unique key which is ...
obareey's user avatar
  • 117
0 votes
1 answer
173 views

Authentication Fold-In in Oracle Database

The Oracle database has a feature known as "Native Network Encryption". It is a protocol described as a 4-step procedure. Step 1 : Negotiate parameters for following steps Step 2 : Exchange ...
user avatar
1 vote
1 answer
604 views

ECDH/ECDSA key exchange on embedded devices

Two devices are communicating only with each other and shall do this with AES encryption. Both devices are offline, have very limited storage and use a small cryptographic coprocessor which is able to ...
earthling's user avatar
  • 165
2 votes
1 answer
479 views

Securing communication between limited embedded systems

I am currently trying to harden communication over a limited physical communication channel on an embedded system. The Scenario I think the system is rather typical for small embedded applications: ...
mile4712's user avatar
9 votes
2 answers
820 views

Key derivation on Arduino

The ATmega2560 is slow - it's a single core, 16MHz 8-bit AVR. Despite that, I need to use some encryption on it, and since it is limited to a few blocks, AES-256 can be used. However, the key ...
Dash's user avatar
  • 95
2 votes
1 answer
309 views

Hash for use in embedded HMAC application

I developed a GNSS logger (http://flysight.ca) which has become popular for scoring skydiving competitions. At the moment, there is little protection against competitors falsifying tracks, but I would ...
Michael Cooper's user avatar
2 votes
2 answers
123 views

Break large exponent calculation into smaller calculations?

I am implementing SRP on an embedded platform. It has crypto acceleration and I am using its built in modular exponentiation function, however it doesn't seem to be able to handle an exponent over 32 ...
uhsl_m's user avatar
  • 121
9 votes
4 answers
4k views

Lightweight cipher using only 8-bit operations

What is the most efficient (in cycles per byte) cryptographically secure symmetric cipher to implement using only 8-bit operations? Algorithms like TEA are great for embedded devices, but it is ...
forest's user avatar
  • 15.2k
3 votes
1 answer
2k views

How is the inter and the intra distance of a PUF calculated?

I was wondering, if I want to calculate the intra distance of a PUF, and I have already measured $n$ times a response to a challenge. Do I choose one reference value and compare the hamming distance ...
Ulli's user avatar
  • 31
2 votes
0 answers
251 views

Is AES CBC + truncated SHA-256 MAC a good design for embedded sensor networks?

I'll start off by saying I'm a noob with respect to software security but I've been reading about security models for a while. Also, I'm afraid some people would just say "go and hire a security ...
Kulki's user avatar
  • 21
0 votes
2 answers
631 views

Why is a certificate needed at client side

I was wondering why you need a certificate of the server at client side. Can't you just fetch it from the CA itself? I am using mbedtls to program some small client, and in all the client examples ...
Pokemaster's user avatar
4 votes
1 answer
441 views

Does still make sense to use SHA1?

I'm working with Arduino and hash-based signatures which are signature schemes that use only hash functions. Due to the constraints of an Arduino I was thinking about using SHA1 as the underlying ...
Jéssica Carneiro's user avatar
5 votes
1 answer
1k views

BN-Curves for 256-bit symmetric security

I'm just studying the purpose of BN-Curves and I am interested in a setting for a 256-Bit security. So could you tell or link me to any information about this? are BN-Curves efficient for this ...
Shalec's user avatar
  • 407
4 votes
1 answer
644 views

Storing a Secure Boot image with AES-GCM instead of AES + RSA signature

In Secure Boot (here defined as data is encrypted and authenticated), we can encrypt the data with AES-128 and authenticate it with a RSA signature, computed over the data's hash, afterwards. On boot,...
Exac's user avatar
  • 146
4 votes
1 answer
294 views

Combination of TLS_PSK and TLS False Start

I am evaluating the use of TLS 1.2 for a low powered embedded environment. After looking at RFC 7925 (TLS for IoT) I was wondering if the combination of the TLS_PSK_WITH_AES_128_CCM_8 cipher suite (...
inorik's user avatar
  • 143
5 votes
1 answer
465 views

Signing dynamic data on an embedded system

I have built a GPS based on the AVR microcontroller. The GPS is used to log flight data for competitions. The log file is updated 10 times per second. What I'd like to do is to associate a signature ...
Michael Cooper's user avatar
8 votes
1 answer
1k views

Tiny Firmware Authentication

I am developing a product based on the NXP LPC11C24 microcontroller. It will communicate with PC software to perform its work. I am attempting to build a secure firmware update functionality. The PC ...
user42679's user avatar
9 votes
1 answer
3k views

Replay attack prevention in connectionless UDP encrypted communication

What are the options for replay attack prevention when two parties exchange UDP messages. No connection or session is estabilished. Communicating parties have pre shared key that is used for ...
PanJanek's user avatar
  • 193
0 votes
1 answer
171 views

How to implement access control for Automotive Embedded Systems using mbedTLS?

I am trying to implement a security access scheme for Automotive Embedded Systems.I need to be able to generate a Random number(of my desired length), combine it with some secret data to send a Seed/...
GeekTom's user avatar
4 votes
1 answer
1k views

How to handle entropy and CTR DRBG for TLS on embedded system?

I am trying to use mbedTLS on a STM32-Nucleo microcontroller (STM32F746). The TLS library wants a RNG function (naturaly), the STM32 has a hardware RNG verified according to NIST SP 800-22. The ...
Ratakex's user avatar
  • 43
6 votes
1 answer
444 views

Least-weak way to authenticate using only AES ECB/CBC

I have an embedded application that needs to occasionally get secure updates from a server. The only crypto library I have available for the chip is an AES-256 cipher (ECB and CBC, encrypt/decrypt). ...
Chriszuma's user avatar
  • 161
1 vote
0 answers
168 views

Encrypted comms between devices on LAN

I'm trying to encrypt a protocol that shares data between devices on a local area network (i.e.no connection to the internet). I don't want to use predefined keys because they're too easy to read from ...
parsley72's user avatar
  • 119
2 votes
1 answer
595 views

Encrypting and Authenticating The Simplex Communication Between Embedded Devices

I am planning to build temperature sensor nodes for my home heater control. Central device will control the heater using temperature data read by nodes. These nodes will send temperature data to ...
ayazar's user avatar
  • 121
1 vote
0 answers
846 views

Is there a fast implementation of RSA for Microcontrollers?

Zhe Liu, Johann Großschädl, and Ilya Kizhvatov. "Efficient and Side-Channel Resistant RSA Implementation for 8-bit AVR Microcontrollers" describes a fast implementation, but only contains a sketch of ...
AShelly's user avatar
  • 111
3 votes
1 answer
56 views

What communications security protocols exist that aren't based on PKC?

Lets say that you have two devices that need to communicate in a secure manner. These devices can share secrets before communication takes place (This sharing of secrets occurs over another secure ...
jougasaki's user avatar
1 vote
1 answer
2k views

Storing a secure key in an embedded device's memory

I am working on an embedded device which send/receive data and stored them in ciphertext mode (encrypted mode ). Now what's best approach for storing Keys (I used ARM CORTEX M series MCU) ? Storing ...
Mahmoud Hosseinipour's user avatar
3 votes
1 answer
825 views

How to enforce data privacy, integrity and authenticity of distributed firmware images for an embedded device?

I'm developing a bootloader for an embedded device, with which it should be possible for customers (i.e. device owners) to update the device's firmware. It is required that: the firmware is ...
skasys's user avatar
  • 33
3 votes
1 answer
284 views

Is there an existing AE protocol with forward secrecy for embedded devices?

I'm working on an embedded device that is connected to a computer over an untrusted channel. According to my threat model I need authentication and encryption on the wire with perfect forward secrecy. ...
Shnatsel's user avatar
  • 150
6 votes
2 answers
2k views

Is there a secure source of entropy on a typical microcontroller?

On a device that does not have a hardware RNG, what is the best source for entropy? Some options and pitfalls floating around: Use the ADC to read something analog: can become deterministic if ...
MandoMando's user avatar
5 votes
3 answers
2k views

Fast PKI for embedded device

We are creating a device with a small microcontroller (20 MHz CPU 16 KiB RAM). We need some way to securely send signed files to device (only signature, no encryption necessary). An external company ...
Toni Homedes i Saun's user avatar
0 votes
0 answers
78 views

What crypto scheme should I use on embedded m2m system with assymetric uplink/downlink bandwidth?

I am working on implementing info security into custom m2m radiolink communication system, which has some restrictions: MCU based endpoint can transmit to gateway with packets max 16 bytes long, and ...
Sergey Ruddy Omelchenko's user avatar
6 votes
3 answers
1k views

secure embedded/microcontroller crypto using AES-ctr with hmac-sha2

The embedded device is a low-power 8-bit microcontroller (memory usage is constrained to about 10kb code, 1kb ram). As the device is battery-powered and manual service should be minimal, more powerful ...
rufensuw8's user avatar
5 votes
2 answers
1k views

Is my id obfuscation algorithm secure?

I'm designing an id obfuscation system. My system includes: Embedded chips, each chip has a unique 32-bit address (id). Server Insecure low-bandwidth unstable one-way channels from the chips to the ...
Ozo's user avatar
  • 309
3 votes
1 answer
227 views

Client authentication on limited hardware

I'm developing a authentication and authorization protocol for a Bluetooth device. The device should communicate with an Android app and needs to be able to authenticate the app during the connection ...
prinsen's user avatar
  • 131
1 vote
0 answers
141 views

Factorization or discrete logarithm is difficult for an attacker?

I have read that difficulty in breaking many algorithms are based either on Factorization or discrete logarithm. I am reading about schemes that are similar to RSA which make use of integer ...
user5507's user avatar
  • 1,913