WindRiver加密库程序员指南6.9版

需积分: 8 139 浏览量更新于2024-07-02 收藏 620KB PDF 举报

"wr_cryptography_libraries_programmers_guide_6.9.pdf" 这是一份针对WindRiver Cryptography Libraries的程序员指南，版本6.9。该文档由Wind River Systems, Inc.于2014年发布，并保留所有版权。文档详细介绍了如何在VxWorks操作系统环境下使用和开发加密库。 VxWorks是Wind River Systems公司注册的商标，是一个实时操作系统（RTOS），广泛应用于嵌入式系统。这份程序员指南是为那些在VxWorks平台上进行安全通信和数据保护的开发者准备的。 Cryptography Libraries是关键组件，用于实现各种加密算法，包括但不限于对称加密（如AES）、非对称加密（如RSA）、哈希函数（如SHA）和数字签名等。这些库帮助开发者确保系统的数据安全，防止未经授权的访问和篡改。文档可能涵盖了以下主题： 1. **库安装与配置**：详细步骤指导如何在VxWorks环境中安装和配置加密库，包括必要的依赖和环境设置。 2. **API参考**：列出了一系列用于加密操作的函数和结构体，包括调用方法、参数解释和返回值说明，帮助开发者理解如何在代码中使用这些API。 3. **安全实践**：提供了最佳实践，以确保正确且安全地使用加密库，避免常见的安全漏洞。 4. **性能优化**：可能包含有关如何在特定硬件上优化加密操作的提示，以提高效率和速度。 5. **错误处理和调试**：描述了如何处理可能出现的问题以及如何调试与加密库相关的代码。 6. **许可证信息**：由于产品可能包含第三方软件，文档会提供相关的许可证信息，以满足开源软件的合规要求。 7. **第三方资源**：可能会引用第三方出版物或提供指向第三方网站的链接，为用户提供更多信息来源，但Wind River不对这些第三方信息的准确性负责。请注意，实际文档中可能还包括关于安全标准的兼容性（如FIPS 140-2）、加密算法的详细实现、密钥管理策略以及其他与加密库使用相关的高级主题。为了获取完整的指导信息，应直接查阅提供的PDF文档。

1 Overview

1.5 Secure Key Database

The Secure Key Database stores public key pairs and passwords/pre-shared keys.

It stores the keys encrypted and hides the key-encrypting key. The key-encrypting

key is divided into several pieces and distributed in the VxWorks image. At

runtime, the key-encrypting key is assembled in order to decrypt the private key.

The Secure Key Database utilizes the Wind River Cryptography Libraries to

encrypt the keys. The encryption algorithm used to encrypt the keys is AES.

In many security protocols (for example, SSH, SSL, and IKE) public key pairs are

used. A public key pair consists of a public and a private key. The private key must

Figure 1-1 Wind River Product Relationships

Wind River Cryptography Libraries

Programmer's Guide, 6.9

be stored in a secure way. Furthermore, in some security protocols a so-called

pre-shared key can be used (for example, with IKE and WPA). Pre-shared keys are

also sensitive information. If the private or pre-shared key is revealed, the security

of a system is compromised.

In many traditional server systems, the keys are stored in an encrypted file. When

the server is started, an operator is prompted for the key-encrypting key to decrypt

the key. This approach is not possible in embedded systems, since there is no

operator available.

Without the use of the Secure Key Database, keys in VxWorks are either stored in

clear text or encrypted with the key-encrypting key stored in clear text in a file.

This means that private keys have no protection in the event that an attacker is able

to access the system (for example, a dishonest operator that is able to log on to the

system for remote management, an end-user reverse engineering a set-top box,

and so on).

When using the Secure Key Database, each key is identified by a key identifier. The

key identifier is a text string.

Each key is stored encrypted in a file, and each key is stored in a separate file. The

file name is the key identifier. Key pairs and pre-shared keys are stored in separate

directories. Key pairs and pre-shared keys have separate namespaces.

The key-encrypting key is set at build time. Each customer must set a unique

key-encrypting key.

For configuration information, see 2.4.2 Secure Key Database Components and

Parameters, p.17.

The VxWorks C interpreter shell should not be included in deployed systems when

the Secure Key Database is used. Using the VxWorks C interpreter shell it is trivial

to output the keys in cleartext.

1.6 Additional Documentation

The following sections describe additional documentation about the technologies

described in this book.

Wind River Documentation

The following Wind River documents present information associated with the

Wind River Cryptography Libraries:

■

The getting started guide for your Platform—describes how to install and

build components of the Wind River VxWorks Platforms product.

■

The user guide for your Platform—provides tutorials that familiarize you with

the Wind River VxWorks Platforms product.

■

Wind River VxWorks Platforms Release Notes—describes reported and resolved

software defects and new features for the Wind River VxWorks Platforms

product.

1 Overview

1.6 Additional Documentation

The following Wind River documents describe how to use products that depend

upon the Wind River Cryptography Libraries for cryptographic services:

■

Wind River IPsec Programmer’s Guide

■

Wind River IKE Programmer’s Guide

■

Wind River SSH Programmer’s Guide

■

Wind River SSL Programmer’s Guide

■

Wind River Wireless Ethernet Drivers Programmer’s Guide

■

Wind River Wireless Security Programmer’s Guide

Cryptography

■

Dworkin, M. Recommendation for Block Cipher Modes of Operation: The CMAC

Mode for Authentication, May, 2005.

http://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf

■

National Institute of Standards and Technology. AES Key Wrap Specification,

November, 2001.

http://csrc.nist.gov/groups/ST/toolkit/documents/kms/key-wrap.pdf

■

National Institute of Standards and Technology. FIPS PUB 140-2: Security

Requirements for Cryptographic Modules

http://csrc.nist.gov/publications/fips/fips140-2/fips1402.pdf

■

National Institute of Standards and Technology. FIPS PUB 180-2: Secure Hash

Standard, August, 2002.

http://csrc.nist.gov/publications/fips/fips180-2/fips180-2withchangenotice.p

■

National Institute of Standards and Technology. FIPS PUB 186-2: Digital

Signature Standard, January 2000.

http://csrc.nist.gov/publications/fips/archive/fips186-2/fips186-2-change1.pdf

■

National Institute of Standards and Technology. FIPS PUB 197: Advanced

Encryption Standard (AES), November 2001.

http://csrc.nist.gov/publications/fips/fips197/fips-197.pdf

■

National Institute of Standards and Technology. FIPS PUB 46-3: Data

Encryption Standard (DES). October 1999.

http://csrc.nist.gov/publications/fips/fips46-3/fips46-3.pdf

■

Rivest, R. The RC5 Encryption Algorithm, August, 2001.

http://people.csail.mit.edu/rivest/Rivest-rc5.pdf

■

Schneier, Bruce. The Blowfish Encryption Algorithm.

http://www.schneier.com/blowfish.html

OpenSSL

It is beyond the scope of this guide to provide a complete description of OpenSSL

or the writing of OpenSSL applications. For any OpenSSL topic not covered in this

guide, see the following sources:

剩余61页未读，继续阅读

ppcust

粉丝: 38
资源: 728

WindRiver加密库程序员指南6.9版

Secure Documents

AUTOSAR_RS_Cryptography.pdf

AUTOSAR_AP_SWS_Cryptography.pdf

AUTOSAR_SWS_Cryptography.pdf

[Douglas_R._Stinson]_Cryptography_Theory_and_Prac(BookFi.org).pdf

cryptography-master.zip_cryptography_cryptography matlab_matlab_

VisualCryptography.rar_cryptography_cryptography matlab_visual c

ciphertexts.rar_cryptography_cryptography matlab_matlab_matlab 密

TMS_Cryptography_Pack_3.4.0.1_for_XE10.2_Downloadly.ir.rar

TMS_Cryptography_Pack_3.4.0.1_for_XE10.3_Downloadly.ir.rar

最新资源