Collaborate Disseminate
I am working on an IoT device and companion app to control features on the device. I’m using an ESP32 MCU – http://esp32.net/
I’ve implemented a JSON REST API on HTTPS over TLS 1.2 with a self signed SSL cert from an RSA 2048 key both gene… Continue reading IoT Device Authentication
I’m working on a client application that will connect to an FTPS server (vsftpd) to download files.
Now, I have ca-cert, cert and key files all setup to work with curl like:
curl -3 -k -v –ftp-ssl –tlsv1.2 –ftp-ssl-reqd –ftp-pasv –ver… Continue reading why is the certificate in mbedtls unknown
An embedded device with Linux supports backup/restore of files encrypted with openssl. The idea of backup is: tar -c …. | openssl smime -encrypt -binary -aes-256-cbc -out backupfile.encrypted -outform DER certificate.key and the idea of … Continue reading What is a good common approach for encrypted backup/restore on an embedded device?
I’m designing an IoT product, I’m searching solutions to secure the system.
The system’s protocol is MQTT, while it’s very helpful, it contains vulnerabilities.
I’ve read enough to come with this proposed system:
Using TLS: It’s important… Continue reading Securing IoT application
Suppose you are going to mass manufacture custom circuit boards and would like the manufacturer to upload the device firmware onto these boards before shipping them out. What are some security systems/methodologies/features you would put i… Continue reading How to Prevent Copying of Device Source Code in Manufacturing
We are working with commercial embedded devices, where we install our software. Then, they are deployed in different client sites. The embedded devices have an Ethernet port and a console port for debugging and recovery. They are connected… Continue reading Password for embedded devices in automatic deployment
This is a question about finding the UART, or whatever alternative, so I can get access to an old reorganiser from the year 2000. I know this is a hardware question, but it is technically reverse engineering and I will have to do some expl… Continue reading Does this reorganiser have UART? [migrated]
Imagine two embedded systems. Each one with two separate trust boundaries.
The first system contains two dedicated mikroprocessors, one to deal with every domain (trust boundary). Both communicate via a well defined API.
The second system … Continue reading Physical separation vs virtualization in embedded systems
I’m looking for way to load to Ghidra,radare or IDA firmware of DFU firmware identified by binwalk as:
0x0 CSR (XAP2) DFU Firmware update header
0x4c8 CSR Bluecore firmware segment
I’ve already extracted second part to seperate file … Continue reading XAP2 processor firmware reverse engeneering [migrated]
I maintain an operating system that can be deployed to embedded devices with highly diverse capabilities. One of the aspects of porting the OS to a device is declaring the available entropy sources (including, but not limited to, dedicated… Continue reading Are weak entropy sources worth it?