to-protect (D)TLS

Overview

to-protect acts as a software Root-of-Trust (RoT) and Secure Storage for generic MCU-based devices:

• Designed for devices with limited computing and communication capabilities.
• Available in multiple versions tailored to different communication protocols.
• Enable essential security functions: certificates and keys secure storage, secure authentication, data transfer integrity and confidentiality, secure boot and more.
• Seamless integration into any generic MCU (ARM Cortex, RISC V…) without requiring hardware modifications.

Benefits:

• Easy security retrofit for devices already in the field through FUOTA mechanism (Firmware update over the air)
• Prevention against logical and physical security attacks on IoT devices exposed to threats
• Reduced code size, no impact on device performances
• Easy to integrate into security management platforms
• SESIP certified (Security Evaluation Standard for IoT platforms)

Features

• Secure TLS/DTLS stack with small footprint
• Secure Storage for keys and data
• Side channel and fault injection resistant crypto-library
• Turn key integration with libTO

Integration

Integration flow is simple and fast:

1. Integrate libTO source code in your firmware to ease integration
2. Call to-protect high level APIs to implement your security features, like TLS, Secure Storage, IP Protection
3. Define to-protect address in the flash
4. Flash to-protect
5. Flash the secure storage

API examples

Implement TLS with to-protect is as easy as 4 API calls:

• To intialize the session:
  TOSE_helper_tls_init_session(...)
• To do the TLS handshake:
  TOSE_helper_tls_do_handshake(...)
• To send data to server:
  TOSE_helper_tls_send(...)
• To receive data from server:
  TOSE_helper_tls_receive(...)