Comments (8)
Hi @YUSMLE
thanks for trying out the Trust X. The AES on-chip is possible only if the on-chip DTLS feature is used (DTLS channel is established between the Trust X DTLS Client and a remote DTLS Server).
from optiga-trust-x.
Hi @ayushev
I was wondering how can we use trust X to encrypt/decrypt data on trust X chip? I am using NRF52840 and wanted to encrypt my data before store it. but can't find any function in API to simply encrypt/decrypt data with trust X.
from optiga-trust-x.
Hi @ayushev.
We are wondering too, that how we can use Trust X to encrypt/decrypt data?
We're using NRF52840 and wanted to encrypt our data before store it, but can't find any function in API to simply encrypt/decrypt data with Trust X.
from optiga-trust-x.
Hi @ayushev
I was wondering how can we use trust X to encrypt/decrypt data on trust X chip? I am using NRF52840 and wanted to encrypt my data before store it. but can't find any function in API to simply encrypt/decrypt data with trust X.
Hi @ayushev.
We was wondering too, that how we can use Trust X to encrypt/decrypt data?
We're using NRF52840 and wanted to encrypt our data before store it, but can't find any function in API to simply encrypt/decrypt data with Trust X.
this issue can help you to find a suggestion (just an idea to try out)
from optiga-trust-x.
Hi @ayushev
I was wondering how can we use trust X to encrypt/decrypt data on trust X chip? I am using NRF52840 and wanted to encrypt my data before store it. but can't find any function in API to simply encrypt/decrypt data with trust X.Hi @ayushev.
We was wondering too, that how we can use Trust X to encrypt/decrypt data?
We're using NRF52840 and wanted to encrypt our data before store it, but can't find any function in API to simply encrypt/decrypt data with Trust X.this issue can help you to find a suggestion (just an idea to try out)
Hi again,
What issue? Do you have a link?
Thanks
from optiga-trust-x.
Sorry, forgot to paste
#13
from optiga-trust-x.
Thank you
I read the issue and I have 2 questions.
-
Is this true for other protocols too? (Can't other protocols like RSA or ECC or ... perform encrypt/decrypt commands neither ??)
-
I may not getting your solution, but can't someone find symmetric key by sniffing I2C communication??
from optiga-trust-x.
I may not getting your solution, but can't someone find symmetric key by sniffing I2C communication??
Please, understand, that working with AES is possible only using the DTLS connection as a context, all other solutions have some some limitations which you have to evaluate carefully and take them on your own risk.
Basically, the AES key is a random number, you can generate a random number and export it on the host, take it as you AES key. If you want to do this confidentially (exporting data on to the host) you can consider using the OPTIGA(TM) Trust M the Shield 2Go will become available soon, in the same way you can take the random number from the Trust X as a seed for the PRNG and generate an AES key on your Host system. Then use this key in combination with user provided pin as a symmetric key to store data on Trust X.
Is this true for other protocols too? (Can't other protocols like RSA or ECC or ... perform encrypt/decrypt commands neither ??)
RSA encryption/decryption in the form provided from the secure element (RSAES PKCS#1 v1.5) is available from the aforementioned [OPTIGA(TM) Trust M](https://github.com/Infineon/optiga-trust
from optiga-trust-x.
Related Issues (20)
- [documentation] optiga_crypt_ecdsa_sign HOT 1
- PAL Linux GPIO buffer max length values HOT 1
- keypair generation at index OPTIGA_KEY_STORE_ID_E0F0 always fails. HOT 3
- Signature verification fails HOT 11
- Public key location for pregenerated private key HOT 1
- Storing data on the GP memory HOT 4
- Wrong oid (object id) used in wiki
- On chip encryption - Trust X SLS 32AIA HOT 2
- Multiple definition of mbedtls_hardware_poll() HOT 1
- Warning in example_optiga_util_write_data.c HOT 1
- Using Trust-X for 1-way MQTT Authentication HOT 3
- Unclosed extern "C"
- I2C write bug HOT 1
- Mbed OS PAL outdated HOT 2
- There is a edit error HOT 1
- Cannot verify signature using internal certificate HOT 17
- Power consumption in "Power Profile" HOT 1
- Add Popcorn Computer's PocketP.C. i2c pal file
- Re-accessing locked data slots HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from optiga-trust-x.