5 ms·
What sorts of applications are written for OS-less systems that require a TLS library? EDIT: Thanks for the sincere responses. In retrospect my question might
by saosebastiao 10y ago
What sorts of applications are written for OS-less systems that require a TLS library?
EDIT: Thanks for the sincere responses. In retrospect my question might have appeared smarmy, but that wasn't my intent and I really appreciate the responses.
- tdb7893 10y agoprobably could be useful in some small "internet of things" device
- throwaway2016a 10y agoThis. Internet of Things especially can benefit from adding TLS.
- Matthias247 10y agoHowever you would often want DTLS there, which is for example what CoAP (HTTP-like IoT protocol which is based on UDP) uses.
- novaleaf 10y agoi would imagine as some sort of secure-boot or trusted hardware process.
- jws 10y agoReasons for SSL: • Security • The server you speak with requires SSL Reasons for no general purpose OS: • Limited power (battery, solar) • Extreme cost pressures (linux needs about $5 of hardware) • Security (smaller code to audit) • Extreme reliability requirements So anything that ticks a bullet in each category is a candidate. • Remote sensors • Radio gateway, say LoRa to an internet server • A device which keeps a secret for you and provides it to a server on command, perhaps something in a 2FA vein. • Remotely triggerable actuators (door locks, parking lot lights)
- StavrosK 10y agoI very badly need a TLS library in my embedded firmware so I can accept new firmware updates over HTTP.
- rthille 10y agoYou don't need TLS for that, you could simply use an HMAC and a shared secret, assuming you're not worried about people with physical access (and ability to get the secret) being able to create updates. Of course if you've got multiple instances of the device (not some hobby thing where they are all owned by you), then the secret for each device should be different so someone can't buy the device, determine the secret and then push updates to other people's devices.
- conradev 10y agoWouldn't signing each release with a private key be the simplest solution here? (that can take many forms, but that general idea is how most software updates currently work)
- adrianN 10y agoVerifying a signature is not the simplest thing to do on hardware that doesn't even support a normal OS.
- conradev 10y agoI see, that makes sense. Let's say you implement verification as: 1. Hashing the incoming data 2. Decrypting an attached signature 3. Verifying the decrypted and calculated hash are the same Even though Step 2 would involve RSA or ECC, wouldn't Step 1 be the most expensive part regardless?
- baby 10y agoYup you are right.
- revelation 10y ago
- Matthias247 10y agoBesides of what was already mentioned: Many automotive or industrial communication buses are currently unencrypted, but could surely benefit from encryption.
- Florin_Andrei 10y agoLots of things with microcontrollers.