Middleware
Asymmetric
EllipsysTM is part of the Ellipsys Security Architecture (ESA) which offers a comprehensive set of encryption and certificate processing functions for embedded applications. The library features a collection of the most widely used symmetric and asymmetric cryptography algorithms, and is offered in a number of different packages to best suit the needs of customers.
Release 3.2 of the library is available now and offers further enhancements to certificate management and the inclusion of PKCS #8 functionality. Ellipsys is certified under the National Institute of Science and Technology (NIST) Crypto Algorithm Verification Program (CAVP), making it an ideal starting point for systems that will be certified for FIPS 140-2 compliance.
The library is targeted at embedded systems which often have limited capabilities and as such efficient implementations are mandatory. The library supports substitution of hardware for software modules to permit designers to choose when hardware offload is required or to use an all software solution if the computational abilities of the processor meet the performance required.
For a preview of the library, please follow either of the links below to see sample code for an RSA operation. A simple registration process is required.
Customers considering licensing the asymmetric cryptography library only, can choose between RSA, ECC and combined packages. The ESS-02-RSA library offers support for:
- RSA Key Generation
- PKCS #1 Sign/Encrypt
- PKCS #1 Import/Export
- ANSI X9.31 Signature Padding
- HMAC – MD5/SHA-1/SHA-2 Random Number Generation
- ASN.1 encoding and decoding
The ESS-02-ECC package supports the following algorithms:
- Prime field curves – 192- to 521-bits
- Binary field curves – 163- to 571-bits
- Key Generation
- ANSI X9.62 Digital Signature Algorithm
- ANSI X9.63 Diffie-Hellman
- ANSI X9.63 Integrated Encryption Scheme
- HMAC –MD5/SHA-1/SHA-2
- Random Number Generation
- &ASN.1 encoding and decoding
The ESS-02 package combines both RSA (ESS-02-RSA) and ECC (ESS-02-ECC) packages. Additional packages are available from Elliptic such as the ESS-Pkg which combines both symmetric (ESS-01) and asymmetric (ESS-02) libraries into a single bundle. Customers working extensively with X.509 certificates can order the ESS-PKI which supports all features of the ESS-Pkg plus a complete X.509 certificate parser and generator including support for:
- X.509 v3 Certificates
- Sign/Verify (RSA and ECC with MD5, SHA-1 and SHA-2)
- Key Import/Export
- ASN.1 Flexi Encoder/Decoder
- X.509 Encoder/Decoder
- Full ECC and RSA support
- PKCS #8 private key
- Full PKCS #5 support
- Full support for a wide range of cipher suites

