STM32F4 Cryptographic Acceleration

ssmail · ‎2015-05-19

Posted on May 19, 2015 at 23:52

I am implementing a platform that must implement Datagram Transport Layer Security (DTLS).

I have the option of using the STM32F439x which includes Cryptographic Acceleration describbed in the datasheet as:

''Cryptographic acceleration: hardware acceleration for AES 128, 192, 256, Triple DES, HASH (MD5, SHA-1, SHA-2), and HMAC''

It seems that the 'STM32 Cryptographic Library' uses this acceleration.

Not being a security expert, I am having a hard time understanding if the Cryptographic Acceleration is useful for DTLS.

Does anyone have experience in this?

qwer.asdf · ‎2015-05-20

Posted on May 20, 2015 at 10:57

Implementing TLS or DTLS library from the scratch is useless (you WILL make bad security mistakes if your initials are not DJB), so the natural thing to do is to use a small, reputable, open source TLS/DTLS library. You have two options that I know of:

1.

http://yassl.com/yaSSL/Home.html

(formerly CyaSSL) is a TLS library that supports DTLS and it

http://yassl.com/yaSSL/cyassl-stm32.html

the hardware crypto facilities provided by the microcontroller that you mentioned.

2. The latest preview version of mbedTLS (formerly PolarSSL)

https://tls.mbed.org/tech-updates/releases/mbedtls-1.4-dtls-preview-released

DTLS too, but I'm not sure if it supports STM32 hardware crypto.