Embedded

February 21, 2012

yaSSL Offers New Open-Source Security Tools

Kerberos, wpa_supplicant, and OpenSSH security services made lean, fast and portable

San Francisco, CA ― February 21, 2011 ― yaSSL, the open-source, embedded SSL provider, has made IT-level security tools available for the Open Source Community, ensuring that mature, advanced security tools like Kerberoswpa_supplicant, and OpenSSH are readily available for devices. By making security services commonly used for enterprise authentication and encryption available for Android and other device platforms, yaSSL enables developers to simplify and secure device connectivity and to close the door on hackers trying to break through Internet security using the backdoor of a device, such as a router, smartphone, printer, or game console.

“Our homes and businesses depend on network-connected devices,” noted Larry Stefonic, Founder of yaSSL. “The need for secure, authenticated exchange, whether for a gaming console or an Android smartphone, has become essential. We understood the pain developers had creating their own security solution or kludging tools together that were then slow and took too much memory. We’ve reduced that stress by providing the resources needed to protect and secure both the network and the device.”

yaSSL’s commitment to the Open-Source Community has sparked a number of efforts: 

  • Kerberos to Android―yaSSL ported Kerberos and a Java interface for the Generic Security Services API (GSSAPI) to enable development for the Android platform with the same secure, mutually authenticated and encrypted communication that’s the de facto standard used by Microsoft, Google, Apple and Linux on enterprise and desktop computers. To provide an easy entry point for Android developers interested in Kerberos, yaSSL created a sample Android NDK application that wraps the functionality of kinit, klist, kvno, kdestroy, and Java GSSAPI client into a simple GUI front-end. With these capabilities in place, developers know their applications prevent eavesdropping and replay attacks. yaSSL also embedded CyaSSL’s cryptography library CTaoCrypt in Kerberos to deliver very fast cryto implementations that are 20 times smaller and use less memory than the standard OpenSSL.
  • OpenSSH for embedded RTOSs—Used for secure remote access, OpenSSH encrypts passwords, sessions, and data for common UNIX and desktop environments, but is far too big and slow for the typical device. By using CyaSSL to do the heavy cryptography for OpenSSH, yaSSL introduces OpenSSH secure access tools that are smaller, faster and more portable. With very fast stream ciphers (e.g., RABBIT and HC-128) and public key support (e.g., NTRU), CyaSSL enables secure remote access for any CyaSSL-supported RTOS environments, including embedded Linux, iOS, QNX, VxWorks, and others. With an already integrated OpenSSH/CyaSSL solution, developers gain secure file copy and remote access to embedded devices without writing their own or kludging different solutions together, greatly decreasing time to market. CyaSSL’s crypto libraries are simply implemented via a build option.
  • Wi-Fi Protected Access (WPA) for devices—wpa_supplicant, a WPA and WPA2 client for 802.11i, offers a secure, out-of-the-box wireless LAN for Linux, BSD, Mac OS X, and Windows. wpa_supplicant’s small code size and clean design make it ideal for secure key negotiations that control the wireless connection of embedded devices. Integration with CyaSSL takes support a step further by securing the Internet connection and adding very fast cipher suites, such as TLS_RSA_WITH_128_CBC_SHA and TLS_NTRU_RSA_WITH_AES_128_CBC_SHA that are not part of the default installation. With support for embedded Linux, iOS, Android, QNX, VxWorks, and other RTOSs, CyaSSL significantly reduces both development time and cost and eliminates the need for developers to write, purchase, or patch their own solution.

“Lean, fast, and portable embedded application security is critical in this environment of ever-growing connectivity,” said Stefonic. “By bringing such widely adopted standards as Kerberos, OpenSSH, and wpa_supplicant to developers, yaSSL gives developers the resources they need to easily integrate their applications with the larger enterprise infrastructure and market. We appreciate being able to give back to the Open Source Community in this way and look forward to the development opportunities this added security will bring. 

About yaSSL

Founded in 2004, yaSSL offers open-source, embedded security solutions that are fast, small, portable and standards-compliant, including:  CyaSSL, the C-language SSL library for embedded and RTOS environments; yaSSL, the embedded C++ SSL library; and yaSSL embedded web server, a fast, embeddable, secure web server. Dual-licensed, yaSSL caters to the security applications in industrial automation, smart energy, surveillance, medical, military, and telecommunications markets as well as the open-source community. yaSSL is headquartered in Bozeman, Montana, and employs a worldwide distributor network. For more information about yaSSL solutions, please visit the company’s Web site atwww.yassl.com, call +1 206 369 4800, or e-mail info@yassl.com.

Channels

Embedded. Mobile. Software.

 
    submit to reddit  

Comments:

You must be logged in to leave a reply. Login »

Related Articles

Who Controls the Power?

Open Power Foundation Aims to Make PowerPC More Plentiful

by Jim Turley

Once upon a time, there were many little RISC processors frolicking in the deep green microprocessor forest. There was the jaunty little ARM. The bright...

Dont Pass Me By

Project Ara Dev Boards and the Internet of Moving Things

by Amelia Dalton

The pedal is to the metal, our motor is running, and Fish Fry is hitting the open road. At the wheel this week is mCube...

Off to the Android Races

New EEMBC Benchmark Measures Android Speed

by Jim Turley

I dont always benchmark my Android devices. But when I do, I prefer AndEBench-Pro. The Most Boring Man in the WorldBenchmarking,...

And Then There Was One

InvenSense Scoops up Movea, Trusted Positioning

by Bryon Moyer

Once upon a time, roughly a month ago, there were sensor makers, who made sensors and did some amount of their own sensor fusion software,...

X Marks the Spot

Thwarting Pirates with AI and X-fest 2014

by Amelia Dalton

At Attention Ye Salty Dogs! Hoist the mizzen mast, Fish Fry is ready to set sail! This week Jim Beneke comes aboard our mighty Fish...

  • Find more on this topic
  • Industry News RSS
  • Comment on this article
  • Print This

Login Required

In order to view this resource, you must log in to our site. Please sign in now.

If you don't already have an acount with us, registering is free and quick. Register now.

Sign In    Register