Re: [Embedlets-dev] Re: [Arch]embedlets & security

[Brill P. <bri...@ro...>]

Can the iButton encrypt a stream in/out of the device?
I'm not sure how they work... are they just keys (in which case we would
still need to write an implementation, but its a step in the right
direction)?

I used to have a fairly simple DES encryption class around I wrote a long
time ago (ported from the common C implementations around)... is was fairly
simple, and should run on something like a aj-80 or a Tini... not the best
solution, but with a little modification I could encrypt a stream with it.

That doesn't help us with SSL however, which your going to need to you
provide HTTP access directly from the device.

Anyway, I'll see what I can come up with on the DES front.

- Brill Pappin
  Rogue Robotics
  www.roguerobotics.com


----- Original Message -----
From: "Ted Kosan" <tk...@ya...>
To: <emb...@li...>
Sent: Saturday, February 08, 2003 9:48 PM
Subject: [Embedlets-dev] Re: [Arch]embedlets & security


> Topic tags:[ARCH][JAPL][WIRING][DOCS][MGMT][STRATEGY][NEWBIE]
> _______________________________________________
>
> Brill stated:
>
> > I think this is an important aspect... and I was recently thinking of
> > implementing some sort of security for Cork...
> >
> > Keep in mind that we're not just talking about password access, but
> > encryption as well, as clear-text passwords are fairly limited in their
> > ability to protect anything running over the network.
> >
> > I think for our reference impl. we should definitely include it in our
> > design, but we may not be able to implement it for the first run (I
envision
> > it will take some work) but we should include some sort of security
manager
> > so checks can be performed, even if they always succeed.
>
> If we go with TINI/TStik as a reference platform (which is the way I am
also
> leaning for a number of reasons) then we can use the iButton holder clip
that
> is present on most TINI/TStik socket boards to hold a JavaCard compliant
> iButton that could handle our digital signing and verification needs.
>
> Of course, this will not help with Jac's 'random manipulation of I/O
modules in
> live wiring mode' scenario so we will need to do some more thinking on
this
> problem too.
>
>
> Ted
>
> __________________________________________________
> Do you Yahoo!?
> Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
> http://mailplus.yahoo.com
>
>
> -------------------------------------------------------
> This SF.NET email is sponsored by:
> SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
> http://www.vasoftware.com
> _______________________________________________
> Embedlets-developer mailing list
> Emb...@li...
> https://lists.sourceforge.net/lists/listinfo/embedlets-developer
>