Questions tagged [mbedtls]

mbed TLS (formerly known as PolarSSL) makes it easier for developers to include cryptographic and SSL/TLS capabilities in their (embedded) products, facilitating this functionality with a minimal coding footprint.

mbed TLS (formerly known as PolarSSL) makes it easier for developers to include cryptographic and SSL/TLS capabilities in their (embedded) products, with a minimal coding footprint.

160 questions
2
votes
1 answer

Example url to check DTLS connetion

Can anyone please suggest an url to check the DTLS connection. For eg. https://www.howsmyssl.com/ is used to test the TLS protocol. Thanks in advance
Anila
  • 21
  • 4
2
votes
2 answers

Using libsodium across platforms

I am using libsodium on an embedded device. I would like to interact with mobile devices for keygen/encryption/decryption. Is it necessary to use libsodium on all devices taking part in the encrypted communication? To put it another way: libsodium…
2
votes
1 answer

What is the format for sending curve parameters and the public key using ECDHE key exchange?

I attempting to use ECDHE key exchange with AES encryption using mbedtls library on client side.The keys are successfully being generated using the following program . Is there any standard format to attach the curve parameters and public key to…
aishwarya
  • 21
  • 1
2
votes
1 answer

Mbedtls - Download file from server

Does someone can explain how to download file from the server using Mbedtls library? They provide some example for using GET request from localhost. I have used it and modified to work with POST. This works just fine but it looks like when I send a…
PeterP
  • 21
  • 1
2
votes
1 answer

AES-CMAC using mbedtls: undefined reference error

I try to implement AES-CMAC using mbedTLS. I get some errors: undefined reference to mbedtls_cipher_cmac_starts, undefined reference to mbedtls_cipher_cmac_update, undefined reference to mbedtls_cipher_cmac_finish, Why could these functions not be…
malievci
  • 369
  • 1
  • 2
  • 6
1
vote
1 answer

Data encrypted with mbedtls not decrypting properly with Bouncy Castle

I have a microcontroller using mbedtls to encrypt data, which is transmitted to a Windows computer where it must be decrypted using Bouncy Castle. AES256 in CBC mode, with a 16-byte initialization vector, is used. My data will always be multiples…
russ
  • 65
  • 7
1
vote
1 answer

Can only encrypt input up until 21 bytes at a time

I am trying to do some RSA encryption using the mbedtls library on specifically the PK API on an esp32 using the Arduino framework and PlatformIO. I can succesfully encrypt 20 bytes at a time (that is inputArray[21]). But anymore than that, and I…
BurgerMan
  • 13
  • 3
1
vote
2 answers

mbedTLS ECDSA verification fails

I am porting one ECC ECDSA verify library to mbedTLS to benefit from large pool of crypto functions and I'm at a point where after 2 nights, I'm not able to verify the signature. It works well with another lib of mine. Test program, keys are…
unalignedmemoryaccess
  • 7,246
  • 2
  • 25
  • 40
1
vote
0 answers

Problem with decrypting using mbedtls on esp32

I am trying to write function to decrypt rsa2048 with mbedtls/pk.h I am trying to write function to decrypt rsa2048 with mbedtls/pk.h esp32 but on the site they wrote Store data to be decrypted and its length in variables. This tutorial stores the…
Resent
  • 11
  • 2
1
vote
1 answer

read subject key identifier extension with mbedTLS

The project I have to extend is using mbedTLS and I have to extract the subject key identifier extension from the certificate. I have not found a workable solution so far. mbedTLS does not offer a direct function for this. I have found…
k_o_
  • 5,143
  • 1
  • 34
  • 43
1
vote
1 answer

why aes encryption result from mbedtls is different than java and online tool result?

I have following c code snippet that try to encrypt "hello" using AES CBC encryption cipher. but some how, the encryption result from below code (mbedtls), is different from Java code result and online tool result. I'm a c programming language…
fad99daf
  • 13
  • 2
1
vote
0 answers

How to connect to an MQTT server using a SAS token, in LwIP?

I'm know working on establishing a connection to an Azure test IOT hub but using a SAS token and not a device certificate as mentioned here in the Azure certificates change I was using this function from LwIP stack to make a tls config using my…
1
vote
0 answers

Where to find trusted root certificates on every OS to satisfy mbedtls?

I'm writing a cross platform websocket client using mbedtls. Now I'm left with the burden of feeding a suitable pack of trustet root certificates to the mbedtls API which looks like this: /* Structure to load trusted root certs into.…
glades
  • 3,778
  • 1
  • 12
  • 34
1
vote
1 answer

Verify ECDSA signature with MbedTLS 3.X

A client sends to me a message signed with a private key, type ECDSA secp256R1. I'm in possession of a leaf certificate, in DER format, provided by the client. In addition, I also have the raw message and a sha256 digest of the msg. I have created a…
jfreek
  • 21
  • 1
1
vote
1 answer

mbedtls Application Record Size

I'm using mbedtls to run SSL over TCP. I'm using my own custom I/O functions for the interface between mbedtls and TCP, set using the mbedtls_ssl_set_bio call. I've noticed that Application records are generated one-to-one with calls to…
Sam Kumar
  • 428
  • 4
  • 8
1 2
3
10 11