Re: cryptlib in FreeRTOS

Peter Gutmann <[email protected]> Sun, 08 Feb 2015 15:20:18 +1300
Newsgroups gmane.comp.encryption.cryptlib
Message-ID <[email protected]>
Chien-Lung WU <[email protected]> writes:

>1) As I checked teh randon diectory. I can not finst a os_name.c for
>FreeRTOS. Do I download the right one (I download teh cryptlib (3.4.3) from
>cryptlib web site.

Since FreeRTOS is a cut-down embedded OS, you need to provide your own entropy
source, see "Random Data Sources" in the manual for details.

>2) how can I configure cryptlib to be compiled under IAR EWARM? (It is easy
>to use makefile; however, I am using IAR, which is not able to run  makefile.
>How can I moodify any configuration files so I can get cryptlib compiled
>correctly.

AFAIK IAR supports building via make (you can turn an IAR project into a
makefile, so presumably there's a way to use makefiles with IAR).  If not,
you'd either need to create a project file using the IAR IDE or download some
third-party make program, there are lots of them around.

>3) I am working in FreeRTOS + LWIP in STR91x platform to build SSH server,
>using cryptlib.

Uhh, that's an ST STR91x, like an STR912something, clocked at 80MHz with 64kB 
(or 96kB) of RAM?  There's no way you can run an SSH server on something like 
that, it has neither the CPU power nor the memory to run SSH.  Well, it could 
run it slowly (the key exchange at the start will take awhile), but there's 
not enough memory to run it in.

>As I understand correct, cryptlib has interafces to hanndle session
>communication. My question is after create the session, the packet should be
>sent/received via TCP/IP (in my case, it is LWIP). That means eveything is
>encrypted using cryptlib and I should use the TCP/IP command to send/receive
>the packets as I did in LWIP. Am I right?

Yes.

>4. As I am doing embedded system, there is not file system. How can I
>generate key to encypt packet?

You'll need somewhere to store the server key, if there's no filesystem you
can use flash memory segments, see the VIRTUAL_FILE_STREAM settings in
io/file.c, but you'd need to create your own mapping layer.  You're better off
working with a filesystem if you need to deal with storing keys.

>5. AS SSH server implementation, should I get to maintain the SSH protocol.
>Is there arny way or example code to show me?

The manual contains full examples, see the section "SSH Server Sessions".

Peter.

_______________________________________________
Cryptlib mailing list
[email protected] via Mail: [email protected]
Archive: ftp://ftp.franken.de/pub/crypt/cryptlib/archives/
http://news.gmane.org/gmane.comp.encryption.cryptlib
Posts from non-subscribed addresses are blocked to prevent spam, please
subscribe in order to post messages.