DocID027745 Rev 1

11/31

AN4683

SPWF01Sxxx use modes

31

2

SPWF01Sxxx use modes

The demonstrator allows secure TCP/IP connection to be created between the Wi-Fi

module SPWF01Sxxx (see [1] in References) and a remote server exposing secured

service. The SPWF01Sxxx module includes a lightweight SSL/TLS stack and a

cryptographic library targeted for embedded applications. The following sections illustrate

the main security features supported.

2.1

TLS protocol

The SPWF01Sxxx module integrates a lightweight SSL/TLS stack and a cryptographic

library. To meet device memory constraints, the demonstrator enables just a subset of

cryptographic algorithms with respect to Table 1. The SPWF01Sxxx implements a SSL/TLS

client with the features listed below:

–

SSLv3.0 and TLSv1.0, 1.1 and 1.2, with automatic downgrade of protocol version

–

Server and client authentication

–

Multiple hashing functions: MD5, SHA-1, SHA-256

–

Block, stream, and authenticated ciphers: AES (128 and 256, CBC), 3DES, ARC4

–

Public key algorithms: RSA (1024, 2048), ECDSA

–

Key exchange: ECDH, ECDHE

–

ECC support: EC curves over 192, 224, 384, 256, 521 bit prime field

–

X.509 certificate support, PEM format

2.2

Supported ciphers list

Table 2. Demonstrator cipher suites

Cipher suites

2 byte codes

(hex format)

Version

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

0xC0,0x27

TLS1.2

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

0xC0,0x23

TLS1.2

TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256

0xC0,0x29

TLS1.2

TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256

0xC0,0x25

TLS1.2

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

0xC0,0x0A

TLS1.0/1.1/1.2

TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA

0xC0,0x05

TLS1.0/1.1/1.2

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

0xC0,0x09

TLS1.0/1.1/1.2

TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA

0xC0,0x04

TLS1.0/1.1/1.2

TLS_ECDHE_ECDSA_WITH_RC4_128_SHA

0xC0,0x07

TLS1.0/1.1/1.2

TLS_ECDH_ECDSA_WITH_RC4_128_SHA

0xC0,0x02

TLS1.0/1.1/1.2

TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA

0xC0,0x08

TLS1.0/1.1/1.2

TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA

0xC0,0x03

TLS1.0/1.1/1.2