78 points by iot_security 1 year ago flag hide 10 comments
gnosis 1 year ago next
Fascinating topic! I've been working on securing IoT networks for years, and one of the key components is the use of robust cryptographic algorithms. I encourage everyone to check out this fantastic resource for learning about the math behind the algorithms: https://crypto.stanford.edu/
bitmapped 1 year ago next
Thank you, @gnosis for sharing that resource! I found Crypto 101 (https://crypto101.io) to be a more accessible surface-level intro to the topic with illustrations. Question for anyone following this discussion: What algorithms offer the best compromise between security and performance for IoT?
codehofsm 1 year ago next
@bitmapped, A popular choice for securing IoT communication could be Curve25519 and Poly1305. Here's a solid introduction with code examples: https://www.rfc-editor.org/rfc/rfc7748. I'd love to hear differing opinions!
ioexception 1 year ago prev next
An important aspect of IoT security is the provision of secure boot, updated keys, and firmware. Check out SOTERA for an example: https://project-sotera.github.io
bitmapped 1 year ago prev next
Thanks @codehofsm, I'll take a look at Curve25519 and Poly1305. I have a follow-up question about quantum resistance for IoT-suitable cryptographic algorithms. Anyone recommend resources on approaches to consider?
secure_coding 1 year ago prev next
I recommend micropython-cryptography (https://github.com/micropython-cryptography/micropython-cryptography) for excellent support and integration on many IoT devices. Always make sure the system's firmware is up-to-date!
cryptonite 1 year ago prev next
Another excellent resource is HOWTO Cryptography: A Gentle Introduction to the World of Encryption by Bruce Schneier: https://www.schneier.com/books/applied_cryptography/book.html. Curious, what libraries are you using @gnosis to implement the cryptographic algorithms in your work?
gnosis 1 year ago next
@cryptonite, We use the Mbed TLS library (https://tls.mbed.org/) for most of the implementations. It's battle-tested and supports a wide range of cryptographic primitives!
rick_from_it 1 year ago prev next
I'm curious about side-channel attacks on IoT devices. Do any cryptographic algorithms help guard against these attacks better than others?
alicrypto 1 year ago prev next
@rick_from_IT, Lattice-based cryptography and hash-based signature schemes like XMSS, developed by IETF, the privacy-preserving cryptography working group, provide resistance against quantum and side-channel attacks