|
|
 |
| SSLimSecure |
| Embedded SSL and TLS
Client and Server |
|
SSLimSecure
is an embedded implementation of the Secure
Sockets Layer (SSL) & Transport Layer Security (TLS)
protocol. SSLimSecure integrates the core functionality
needed to implement secure HTTPS client/server components
that are fully interoperable with free and commercial HTTP
web browser and server implementations, and to secure any
non-HTTP socket based transactions as well. SSLimSecure
includes support for all popular cryptography algorithms
including AES and 3-DES and offers easy integration with
existing web-based device management systems, embedded web
servers and HTTP clients. Given its ability to scale out
optional features, SSLimSecure is ideally suited for use
in low-resource embedded environments.
|
|
|
|
|
|
|
|
|
|
|
|
| Cryptography Support |
| SSLimSecure’s
included crypto library contains APIs to support most
popular ciphers for encryption and hashing, and includes
support for hardware accelerators and a framework for
elliptic curves. The crypto functionality is completely
modular, allowing for scaling out of unused ciphers for
deeply scaled down memory footprints when SSLimSecure is
used, and can also be used by other applications and
protocols. Specifically the following cryptographic
modules are included: |
 |
| Encryption |
 |
AES (Advanced
Encryption standard or Rijndael) |
 |
Fast crypt |
 |
RC4 |
 |
RC2 which
includes 4 modes — ecb, cbc, cfb, and ofb |
 |
Blowfish which
includes 4 modes — ecb, cbc, cfb, and ofb |
 |
Eric A.
Young’s implementation of DES/3-DES which includes
15 flavors |
|
|
|
 |
1, 2, and 3
key (3-DES) versions of ecb, cbc, cfb, and ofb |
|
 |
pcbc |
|
 |
generic cfb
and ofb |
|
 |
DESx in cbc
mode |
|
|
 |
|
Message Digests |
 |
MD5, RIPE-MD,
MD-4, and MD2 |
 |
SHA (SHA-0), SHA-1,
SHA-2 (256, 384, 512) |
 |
MDC2 |
|
|
 |
Customization
Flexibility |
 |
 |
 |
|
 |
Available in full-source format. |
|
 |
Configurable choice of ciphers and
authentication methods. |
|
 |
Overridable PRNG functionality. |
|
 |
Configuration loader. |
|
 |
Customizable hardware assist functionality. |
|
 |
Unwanted components can be scaled out. |
|
|
 |
 |
 |
 |
|
|
|
|
|
|
|