Embedded Systems Security

Chapter 5

Data Protection Protocols for Embedded Systems

Chapter Outline

5.1 Introduction

5.2 Data-in-Motion Protocols

5.2.1 Generalized Model

5.2.1.1 Point-to-Point

5.2.1.2 Point-to-Multipoint

5.2.2 Choosing the Network Layer for Security

5.2.3 Ethernet Security Protocols

5.2.3.1 802.1X

5.2.3.2 802.11i

5.2.3.3 WPA2

5.2.3.4 802.1AE

5.2.4 IPsec versus SSL

5.2.5 IPsec

5.2.5.1 Integrated versus Bump-in-the-Stack

5.2.5.2 IPsec RFCs

5.2.5.3 IKE

5.2.5.4 IPsec Hardware Offload

5.2.5.5 IPsec for Very Low Power Devices

5.2.5.6 HAIPE

5.2.6 SSL/TLS

5.2.6.1 OpenSSL

5.2.6.2 GnuTLS

5.2.7 Embedded VPN Clients

5.2.7.1 Openswan and Racoon2

5.2.7.2 OpenVPN

5.2.8 DTLS

5.2.9 SSH

5.2.9.1 Additional Protocols Based on SSH

5.2.9.2 OpenSSH

5.2.10 Custom ...