[Embedlets-dev] Re: [Arch]embedlets & security

[Ted K. <tk...@ya...>]

Brill,

> Can the iButton encrypt a stream in/out of the device?
> I'm not sure how they work... are they just keys (in which case we would
> still need to write an implementation, but its a step in the right
> direction)?

They are good for signing information and verifyng signagures but they are too
slow for encrypting and decrypting data streams.  See:

http://lists.dalsemi.com/maillists/java-powered-ibutton/2002-November/002775.html



> That doesn't help us with SSL however, which your going to need to you
> provide HTTP access directly from the device.

Well, does one really need to encrypt the communications to and from an
embedded device?  I would think that measurement data along with command and
control messages do not represent sensitive information that needs to be
encrypted.  I can definitely see the need to digitally sign outgoing data posts
and to verify the digital signatures on incoming commands in certain
situations, though.  The crypto iButtons should be able to handle these chores
I think.

Ted

__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com