Skip to content
Steve Clark edited this page Feb 9, 2016 · 10 revisions

Welcome to the cryptoauth-openssl-engine WiKi!

Overview

This project is built on the base of the OpenSSL stable version 1.0.2 integrating the Atmel ATECC508A (http://www.atmel.com/devices/ATECC508A.aspx) hardware to provide secure key storage, ECC cryptographic calculations for the ECC NIST P-256 curve, and FIPS certified hardware Random Number Generator. The implementation is using the ENGINE API’s of OpenSSL to perform the ATECC508A cryptographic operations.

This project integrates the key creation and import capabilities of the ATECC508A into OpenSSL key creation and certificate creation process.

Also, the secure key storage for RSA keys is implemented using the encrypted read/write feature of the ATECC508A.

Objectives

Customers may buy un-programmed ATECC508A devices, download this project, build it, and establish a TLS1.2 connection without writing any code.

Customers that buy personalized devices should be able to use these devices without writing any code.

###Supported Cipher Suites Many ECDH(E)-ECDSA and ECDHE-RSA cipher suites are supported with the OpenSSL Engine for ATECC508A implementation.

Details for cipher suites can be found here

Buying Hardware

In order to buy a device, contact Atmel online store (http://www.atmel.com/buy/default.aspx), Atmel representative or distributor.

Learning the Project

  • Read all WiKi pages.
  • Get and build sources as described here.
  • Read Doxygen Documentation: docs/doxygen/html/index.html.

Download Zip File

Download

Clone this wiki locally