|
|
|
|
|
|
Snapshield™ provides a security enabler platform along with an offering of cryptographic libraries for OEMs. With its extensive experience in telephony security, Snapshield™ contributes security software
applications, implemented today in legacy (wireline and wireless) services, along with a rich cryptographic library, including all popular private and public-key encryption algorithms (all algorithms required by IPSec
standard), such as DES, the high-strength Triple DES and the brand new AES algorithm for symmetric encryption, with key exchange protected by RSA, ElGamal and Diffie-Hellman, MD5 and SHA-1 hashing functions along with
their keyed versions (HMAC), RSA and DSA for digital signatures. Snapshield™ offers both low footprint and exceptional efficiency that minimizes impact on battery life - so essential to wireless communications devices.
Snapshield™ holds a complete list of compliant Third Party Encryption Algorithms.
|
|
|
|
Today, in the Information Technology age, information security has become a major concern for corporations around the world. Businesses appreciate the importance of their communication privacy and consider information
as a valuable asset. Security technologies have evolved and became highly dynamic and complex. Their nature makes software implementations a necessity. Once a specific security mechanism becomes obsolete due to the increase
in computation power, a new mechanism could be easily implemented. Thus, with the use of software implementations, high security level can always be maintained.
Snapshield™ offers companies that are engaged in the development of applications based on Texas Instruments DSPs
our Snapcrypt™ - Standard Algorithms for Cryptography. The use of our Software will save costly development and provide you with much faster time to market. Snapshield's
algorithm is highly optimized for usage within embedded systems.
Snapcrypt™ - Snapshield’s cryptography library for the TMS320C54x,TMS320C55x, TMS320C62x, TMS320C64x, and TMS320C67x DSP generations and OMAP platform, contains algorithms for symmetric block
ciphers, one-way hash functions, public key encryption and digital signature. These algorithms transform well-known cryptographic standards into highly efficient code specially designed for the TI's platforms. The Snapshield™
library fully supports TI's eXpressDSP algorithm standard and thus can be easily integrated into DSP-based security products.
SYMMETRIC BLOCK CIPHERS
Symmetric block ciphers are the widespread algorithms for sequential data encryption. A block of a plaintext is treated as a whole and used to
produce a ciphertext of equal length. The same algorithm and key are used for both encryption and decryption. These algorithms are much faster than public
key encryption algorithms, but they request both sides to possess a common secret key.
|
|
| Encryption Algorithms |
Features |
| DES |
64-bit block
56-bit key
Specified in: ANSI X3.92 and FIPS 46-2
Operation modes: (Specified in: ANSI X3.106 and FIPS 81)
ECB, CBC, CFB, OFB |
| 3DES |
64-bit block
168-bit key
Specified in: ANSI X9.52 and FIPS 46-3 |
|
|
DES
Data Encryption Standard (DES) is a most widely used symmetric block cipher. DES was adopted as the NIST standard encryption algorithm for unclassified
data in 1976. It encrypts 64-bit data blocks using 56-bit key. DES can be applied in several modes:
Electronic Codebook (ECB): a block of plaintext
is encrypted into a block of
ciphertext.
Cipher Block Chaining (CBC): the plaintext is XORed with
the previous
ciphertext block before it is encrypted, in order to conceal plaintext patterns.
Cipher Feedback (CFB): implements DES as
self-synchronizing stream
cipher that can encrypt units smaller than 64-bit block size.
Output Feedback (OFB): using DES as synchronizing stream
cipher with no
error propagation.
3DES
3DES (Triple DES) achieves a higher level of security by encrypting the data three times using DES with three different, unrelated keys.
HASH FUNCTIONS
One-way hash functions squeeze message of arbitrary length into short digest, in such a way that no information about the message can be revealed from the
digest, moreover one cannot produce a message for a given digest. Hash functions have several uses:
Data integrity: insure that the received data was not corrupted. The sender
appends the digest to the message; the receiver recalculates the digest and
compares the result to the received digest. Any difference means that the
message was corrupted.
Message compression as part of digital signature protocol.
Keyed Hash Message Authentication Code (HMAC): incorporates a secret key
into existing hash algorithm. Only if the sender and the receiver have the same
key they will calculate the same digest.
|
|
|
Hash
Algorithms |
Features |
| SHA-1 |
Message length < 2^64 bits
512-bit block
160-bit digest
Specified in ANSI X9.30-2 and FIPS 180-1 |
| HMAC-SHA-1 |
Keyed version of SHA-1
Specified in IETF RFC 2104 |
| MD5 |
Message length < 2^64 bits
512-bit block
160-bit digest
Specified in IETF RFC 1321 |
| HMAC-MD5 |
Keyed version of MD5
Specified in IETF RFC 2104 |
|
|
|
|
PUBLIC KEY ALGORITHMS
Public key encryptions algorithms enable transmission of secret information over an open channel without a common secret previously shared between them.
These algorithms employ for encryption trapdoor one-way functions that can be executed in "short" time, while execution of their inverse functions
takes practically infinite time. The decryption of the information is only possible through a secret, private key that avoids the need to perform the inverse
function. This private key is used for derivation of the public key that is applied for the encryption. Contrary to the private key, the public does not have
to be kept secretly.
The main drawback of the public key algorithms is that their execution takes too much time; therefore they are used primarily for transmitting secret keys
of block ciphers and HMACs.
The public key algorithms are employed likewise for Digital Signatures. The signature is performed using the private key and the verification is done
through the public key.
|
|
|
| Public Key Algorithms |
Usage |
Features |
| RSA |
Encryption and Digital Signature |
Key length: 768, 1024 bits (Modulo length)
Specified in ANSI X9.31-1 (Digital Signature) |
| ELGamal |
Encryption and Digital Signature |
Key length: 768, 1024 bits (Modulo length)
180-bit exponent |
| DSA |
Digital Signature |
512 to 1024-bit key
Specified in: ANSI X9.30-1 and FIPS 186 |
| Diffie-Hellman |
Key Agreement Procedure |
Key length: 768, 1024 bits (Modulo length)
180-bit exponent
Specified in: ANSI X9.42 |
|
|
If you are interested in any of these algorithms please contact uri.naor@snapshield.com
|
|
|