DocID027745 Rev 1

17/31

AN4683

Demonstration package

31

3

Demonstration package

The functions of the demonstration package are summarized in Table 3.

3.1

Package directories

The demonstration package is contained in the project folder and is organized as described

below:

•

Project/firmware: this folder contains the firmware binary

Table 3. Demonstration package functions

SSL/TLS Client

Available versions: SSLv3.0 and TLSv1.0, 1.1 and 1.2. Automatic

downgrade of protocol version.

Cipher suites

Table 2

– Public key algorithms

RSA (1024, 2048), ECDSA

– Key-exchange/agreement

ECDH, ECDHE

– Symmetric ciphers for

encryption

AES (128 and 256, CBC), 3DES, ARC4

– Hash

MD5, SHA-1, SHA-256

– ECC support

EC curves over 192, 224, 384, 256, 521 bit prime field

Certificates

X.509 certificate support, PEM format.

Configurations

Anonymous

For module configuration, see Section 2.4.1 and Figure 5.

One-way authentication

For module configuration, see Section 2.4.2 and Figure 6. In

particular notice that:

– Module reference time must be initialized

– Root CA certificate and domain name of the server must be

loaded.

– Authentication ciphers: ECDSA with all EC curves, RSA-1024

and RSA-2048.

– Maximum allowed size for files uploaded to module is

approximately 1.3KB.

Mutual authentication

For module configuration, see Section 2.4.3 and Figure 7. In

particular:

– Module reference time must be initialized

– Root CA certificate and domain name of the server, client

certificate and client key files must be loaded.

– Authentication ciphers: ECDSA with all EC curves.

– Maximum allowed size for files uploaded to module is

approximately 3KB overall.