Any Encryption available for Nut/OS?

[uprinz]

Hi!

Is there any encryption available for Nut/OS like SSH or https (SSL)?

Must not be fast and must not be available on 8-bit systems but should
work on SAM7X (not SAM7XC)

Best reagrds,
Ulrich
_______________________________________________
http://lists.egnite.de/mailman/listinfo/en-nut-discussion

[András Szemző]

Hi
Xyssl can run on sam7x with ethernut, some porting work is needed.

About a year ago i succesfully run a https client demo with these setup.

Andras



On 2009.09.26., at 23:34, Ulrich Prinz <uprinz2@...> wrote:

> Hi!
>
> Is there any encryption available for Nut/OS like SSH or https (SSL)?
>
> Must not be fast and must not be available on 8-bit systems but should
> work on SAM7X (not SAM7XC)
>
> Best reagrds,
> Ulrich
> _______________________________________________
> http://lists.egnite.de/mailman/listinfo/en-nut-discussion

_______________________________________________
http://lists.egnite.de/mailman/listinfo/en-nut-discussion

[Bernd Walter-2]

On Sun, Sep 27, 2009 at 06:01:44PM +0200, Andras Szemzo wrote:
> Hi
> Xyssl can run on sam7x with ethernut, some porting work is needed.

Sounds very interesting.

> About a year ago i succesfully run a https client demo with these setup.

What key length did you use?
A while back I've heared rumors that the controller could take minutes
for the asymetric encryption used to establish a connection and that
small key lengths have to be used to work around.
Since SAM7XC only has hardware support for symetric cryptography it
can only help for the data transfer itself.
But I always had doubts about that rumours, because SSL establishing
time with FreeBSD on AT91RM9200 is quite decent.
The RM92000 is much faster of course, but not that much to explain
requiring minutes on the X256.

> On 2009.09.26., at 23:34, Ulrich Prinz <uprinz2@...> wrote:
>
> > Hi!
> >
> > Is there any encryption available for Nut/OS like SSH or https (SSL)?
> >
> > Must not be fast and must not be available on 8-bit systems but should
> > work on SAM7X (not SAM7XC)
> >
> > Best reagrds,
> > Ulrich
> > _______________________________________________
> > http://lists.egnite.de/mailman/listinfo/en-nut-discussion
> _______________________________________________
> http://lists.egnite.de/mailman/listinfo/en-nut-discussion

--
B.Walter <bernd@...> http://www.bwct.de
Modbus/TCP Ethernet I/O Baugruppen, ARM basierte FreeBSD Rechner uvm.
_______________________________________________
http://lists.egnite.de/mailman/listinfo/en-nut-discussion

[András Szemző]

On Sep 28, 2009, at 10:30 AM, Bernd Walter wrote:

> What key length did you use?
> A while back I've heared rumors that the controller could take minutes
> for the asymetric encryption used to establish a connection and that
> small key lengths have to be used to work around.
> Since SAM7XC only has hardware support for symetric cryptography it
> can only help for the data transfer itself.
> But I always had doubts about that rumours, because SSL establishing
> time with FreeBSD on AT91RM9200 is quite decent.
> The RM92000 is much faster of course, but not that much to explain
> requiring minutes on the X256.

I don't remember for the details, it was with Nut 3.9.9 or something  
like that. :)
But on my other PC I thing I have the sources, so I can look it, or  
make some test in my sam7x board.

It was only a quick and dirty test, and the porting is very poor  
(example havage.c) but it would be nice to
reimplement it.

Meanwhile it's not maintained any more, and has renamed to polarssl.

_______________________________________________
http://lists.egnite.de/mailman/listinfo/en-nut-discussion

[Malte Marwedel]

Ulrich Prinz schrieb:
> Hi!
>
> Is there any encryption available for Nut/OS like SSH or https (SSL)?
>
> Must not be fast and must not be available on 8-bit systems but should
> work on SAM7X (not SAM7XC)
Perhaps the work from sun might be interesting. It looks like they
implemented HTTPS on an ATMega128:
http://research.sun.com/projects/crypto/sizzle.html

> Best reagrds,
> Ulrich
> _______________________________________________
> http://lists.egnite.de/mailman/listinfo/en-nut-discussion
>

_______________________________________________
http://lists.egnite.de/mailman/listinfo/en-nut-discussion

[Ethernut]

Ulrich Prinz wrote:

> Must not be fast and must not be available on 8-bit systems but should
> work on SAM7X (not SAM7XC)

What a pity! I only know about fast ones running on 8-bitters. ;-)

http://point-at-infinity.org/avraes/
http://www.das-labor.org/wiki/AVR-Crypto-Lib
Atmel's application notes AVR230 and AVR231


As long as you are independent, there are several. For web access
SSL/TLS would make a lot of sense. But this seems to be difficult to
implement on tiny systems. Actually the only one I've heard of is

http://www.rabbit.com/products/SecWeb_App_Kit/

Harald
_______________________________________________
http://lists.egnite.de/mailman/listinfo/en-nut-discussion

[Edwin van den Oetelaar (Oetelaar Automatisering uit Best)-2]

Harald Kipp wrote:

> Ulrich Prinz wrote:
>
>  
>> Must not be fast and must not be available on 8-bit systems but should
>> work on SAM7X (not SAM7XC)
>>    
>
> What a pity! I only know about fast ones running on 8-bitters. ;-)
>
> http://point-at-infinity.org/avraes/
> http://www.das-labor.org/wiki/AVR-Crypto-Lib
> Atmel's application notes AVR230 and AVR231
>
>
> As long as you are independent, there are several. For web access
> SSL/TLS would make a lot of sense. But this seems to be difficult to
> implement on tiny systems. Actually the only one I've heard of is
>
> http://www.rabbit.com/products/SecWeb_App_Kit/
>
> Harald

Ask Rob from Pragmalab.
He hacked together a 'encryption' for the SIR internet radio's

http://www.pragmalab.nl/em_projecten_sir.html
He lurks in this group too.

best regards,
Edwin van den Oetelaar

_______________________________________________
http://lists.egnite.de/mailman/listinfo/en-nut-discussion

[uprinz]

Hi!

I only had time to take a very short view on it, but it looks
interesting and promising. As fas as I can see, the polar is a spiinof
from xyssl. The xyssl is maintained but only by one guy now. It is
available as a GNU version and as a BSD version. So we could implement
it in both options.
For me it is only an experiment if I have some time to spare. May be
later it might become interesting for business too and then it is easier
for me to know what I am talking about if I have to decide the platform
for the new project.

Meanwhile, thnaks for the hint.

Best regards, Ulrich

András Szemző schrieb:

> On Sep 28, 2009, at 10:30 AM, Bernd Walter wrote:
>> What key length did you use?
>> A while back I've heared rumors that the controller could take minutes
>> for the asymetric encryption used to establish a connection and that
>> small key lengths have to be used to work around.
>> Since SAM7XC only has hardware support for symetric cryptography it
>> can only help for the data transfer itself.
>> But I always had doubts about that rumours, because SSL establishing
>> time with FreeBSD on AT91RM9200 is quite decent.
>> The RM92000 is much faster of course, but not that much to explain
>> requiring minutes on the X256.
>
> I don't remember for the details, it was with Nut 3.9.9 or something  
> like that. :)
> But on my other PC I thing I have the sources, so I can look it, or  
> make some test in my sam7x board.
>
> It was only a quick and dirty test, and the porting is very poor  
> (example havage.c) but it would be nice to
> reimplement it.
>
> Meanwhile it's not maintained any more, and has renamed to polarssl.
>
> _______________________________________________
> http://lists.egnite.de/mailman/listinfo/en-nut-discussion

_______________________________________________
http://lists.egnite.de/mailman/listinfo/en-nut-discussion