3 ms·
Everyone is talking about personal computers and mobile devices. Not mentioned: the IoT movement with devices in the field with minimal capabilities and no pat
by 2bluesc 11y ago
Everyone is talking about personal computers and mobile devices. Not mentioned: the IoT movement with devices in the field with minimal capabilities and no path for upgrade.
Older version of devices like TI's CC3200 (which appears to support SHA2 in hardware at least) will be forced offline without an upgrade (and in many cases I assume SW implementation of missing HW algos)
It's ironic: device developers tried to be forward looking with TLS security only to stumble over it later. I'm sure the subset of decisions makers that are clueless will blame security for crippling their systems. Now security is evil to the ignorant.
tl;dr; Plan for upgradability with embedded hardware products