Real Time Logic LLC / SharkSSL-Lite

This package includes the SharkSSL lite library and header files.

Dependents:   WebSocket-Client-Example SharkMQ-LED-Demo

SharkSSL-Lite

Description: SharkSSL is an SSL v3.0 TLS v1.0/1.1/1.2 implementation of the TLS and SSL protocol standard. With its array of compile-time options and Raycrypto proprietary cryptographic algorithms, SharkSSL can be fine-tuned to a footprint that occupies less than 20 kB, while maintaining full x.509 authentication. The SharkSSL-Lite download includes a subset of SharkSSL and header files made for use in non-commercial and for evaluation purposes.

Features

Examples

Limitations

SharkSSL-Lite includes a limited set of ciphers. To use SharkSSL-Lite, the peer side must support Elliptic Curve Cryptography (ECC) and you must use ECC certificates. The peer side must also support the new ChaCha20/Poly1305 cipher combination.

ChaCha20 and Poly1305 for TLS is published RFC 7905. The development of this new cipher was a response to many attacks discovered against other widely used TLS cipher suites. ChaCha20 is the cipher and Poly1305 is an authenticated encryption mode.

SharkSSL-Lite occupies less than 20kB, while maintaining full x.509 authentication. The ChaCha20/Poly1305 cipher software implementation is equally as fast as many hardware accelerated AES engines.

Creating ECC Certificates for SharkSSL-Lite

The following video shows how to create an Elliptic Curve Cryptography (ECC) certificate for a server, how to install the certificate in the server, and how to make the mbed clients connecting to the server trust this certificate. The server in this video is installed on a private/personal computer on a private network for test purposes. The video was produced for the embedded.com article How to run your own secure IoT cloud server.

inc/SharkSSL_opts.h

Committer:
wini
Date:
2016-05-23
Revision:
1:d5e0e1dcf0d6
Parent:
0:e0adec41ad6b

File content as of revision 1:d5e0e1dcf0d6:


/*

DO NOT EDIT THIS FILE!

The pre-compiled SharkSSL library is compiled with these options and
modifying these options may cause system failure.

*/


#define SHARKSSL_UNALIGNED_ACCESS 1

#define SHARKSSL_ACCEPT_CLIENT_HELLO_2_0 0
#define SHARKSSL_AES_CIPHER_LOOP_UNROLL 0
#define SHARKSSL_BIGINT_EXP_SLIDING_WINDOW_K 1
#define SHARKSSL_BIGINT_WORDSIZE 32
#define SHARKSSL_DES_CIPHER_LOOP_UNROLL 0
#define SHARKSSL_ECC_USE_SECP192R1 0
#define SHARKSSL_ECC_USE_SECP224R1 0
#define SHARKSSL_ECC_USE_SECP384R1 0
#define SHARKSSL_ECC_USE_SECP521R1 0
#define SHARKSSL_ENABLE_AES_CCM 0
#define SHARKSSL_ENABLE_AES_CTR_MODE 0
#define SHARKSSL_ENABLE_AES_GCM 0
#define SHARKSSL_ENABLE_CERTSTORE_API 0
#define SHARKSSL_ENABLE_CERT_CHAIN 0
#define SHARKSSL_ENABLE_CLONE_CERTINFO 0
#define SHARKSSL_ENABLE_DHE_RSA 0
#define SHARKSSL_ENABLE_ECDHE_RSA 0
#define SHARKSSL_ENABLE_ECDH_ECDSA 0
#define SHARKSSL_ENABLE_ECDH_RSA 0
#define SHARKSSL_ENABLE_MD5_CIPHERSUITES 0
#define SHARKSSL_ENABLE_PEM_API 0
#define SHARKSSL_ENABLE_PSK 0
#define SHARKSSL_ENABLE_RSA 0
#define SHARKSSL_ENABLE_RSA_API 0
#define SHARKSSL_ENABLE_RSA_BLINDING 1
#define SHARKSSL_ENABLE_SELECT_CIPHERSUITE 0
#define SHARKSSL_ENABLE_SESSION_CACHE 0
#define SHARKSSL_ENABLE_SSL_3_0 0
#define SHARKSSL_ENABLE_TLS_1_1 0
#define SHARKSSL_MD5_SMALL_FOOTPRINT 1
#define SHARKSSL_SHA256_SMALL_FOOTPRINT 1
#define SHARKSSL_SSL_SERVER_CODE 0
#define SHARKSSL_USE_3DES 0
#define SHARKSSL_USE_AES_128 0
#define SHARKSSL_USE_ARC4 0
#define SHARKSSL_USE_DES 0
#define SHARKSSL_USE_ECC 1
#define SHARKSSL_USE_MD5 0
#define SHARKSSL_USE_NULL_CIPHER 0
#define SHARKSSL_USE_RNG_TINYMT 1
#define SHARKSSL_USE_SHA1 0
#define SHARKSSL_USE_SHA_256 0
#define SHARKSSL_USE_SHA_512 0
#define SHARKSSL_USE_SHA_384 0
#define SHARKSSL_ENABLE_CLIENT_AUTH 0
#define SHARKSSL_ENABLE_SECURE_RENEGOTIATION 0
#define SHARKSSL_ENABLE_CERT_KEYUSAGE 0
#define SHARKSSL_DISABLE_INBUF_EXPANSION 0
#define SHARKSSL_ONLY_POLYCHACHA 1
#define SHARKSSL_ECC_VERIFY_POINT 0
#define SHARKSSL_ECC_TIMING_RESISTANT 0
#define SHARKSSL_ENABLE_INFO_API 0
#define SHARKSSL_USE_AES_256 0
#define SHARKSSL_ENABLE_ECDSA 1
#define SHARKSSL_ENABLE_ECDHE_ECDSA 1
#define SHARKSSL_ENABLE_CA_LIST 1

#define BASIC_TRUST_CHECK

#ifndef NDEBUG
#define NDEBUG
#endif