- 전체
- 안드로이드 플랫폼
- 아두이노
- 라즈베리 파이
- 안드로이드 ADK
- Embedded HardWare
- Embedded FirmWare
- Embedded Platform
- Embedded SoftWare
- 임베디드 리눅스
- Hobby Electronics
- 임베디드기사 - 국가기술자격
- VHDL 디지털설계
- M2M_IoT_사물지능통신
- 아마추어 로봇
- EDA - Electronic CAD
- 로봇공학
- 국가기술자격 로봇 제작 개발 자격증
- IoT (임베디드 인터넷)
[아두이노 arduino] 아두이노 json 암호화: Crypt json content
Hi everyone,
I am doing a software on a ESP8266 which stores json files in the flash memory. I wanted somehow to crypt some json properties inside the file so that if someone access it doesn't ready my data (example: a username / password of mqtt server). I have google a lot for the last few days but without any succes. Can someone point me to what library should i use in order to do this ? thanks!
This is sort of hard to do, because you have to store the key to decrypt it somewhere... so if they've dumped the flash, they have the information needed to decrypt it...
Though there is probably some merit to at least a passing attempt to obfuscate it, so it doesn't jump out at someone snooping around in the flash - but if they've got the flash contents, a dedicated adversary will be able to get the sensitive data out of it... I mean, they could just write it to their own board, and see what requests it sends, and get the data that way if they wanted to.
There are AES libraries for Arduino / ESP8266 which can do the job - but they introduce a performance and storage impact. You could use some very basic bit inversion instead:
void xor_crypt(char *buffer, int buf_len, char* key, int key_len)
{
int ki = 0;
for (int bi = 0; bi < buf_len; bi++) {
buffer[bi] ^= key[ki++];
if (ki >= key_len) ki = 0;
}
}
...
char* key = "secret";
char* str = "Say hello to my little friend!";
int str_len = strlen(str); //Remember this value in order to ensure proper decryption!
//Encrypt
xor_crypt(str, str_len, key, strlen(key));
Serial.println(str);
//This will be "garbage" in the serial monitor
//Reverse
xor_crypt(str, str_len, key, strlen(key));
//Do NO rely on "strlen" for "str" here!
Serial.println(str); //This will be the original string again
Even though this form of encryption may seem crude, it may be just as hard to break as more advanced forms of encryption - but the performance impact is negligible.
EDIT: Bug in code fixed.
vaz83:
The idea would be storing the key in the code itself, but leaving some json files on the flash memory encrypted. I know there is always a way, but at least i am protecting my data at some sort of level. Can you point me in any direction ?
Then on the other hand this is just obfuscation as DrAzzy said. You could store the key on an external EEPROM chip or an sd card which you insert before operation and remove after operation (much like online banking dongles work).
Hi Danois, thanks! This is the direction i wanna take.
I was trying the code you sent, which works fine, but what i want to crypt is something i will read and send to the function. I have made this:
char* key = "secret";
void xor_crypt(char *buffer, int buf_len, char* key, int key_len)
{
int ki = 0;
for (int bi = 0; bi < buf_len; bi++) {
buffer[bi] ^= key[ki++];
if (ki >= key_len) ki = 0;
}
}
void crypt(char * input) {
xor_crypt(input, strlen(input), key, strlen(key));
Serial.println(input); //Crypted
xor_crypt(input, strlen(input), key, strlen(key));
Serial.println(input); //Descripted
delay(5000);
}
What happens now is that when i pass the text i want to crypt, when i then decrypt it, it doesn't show all the text 
Danois90:
There are AES libraries for Arduino / ESP8266 which can do the job - but they introduce a performance and storage impact. You could use some very basic bit inversion instead:void xor_crypt(char *buffer, int buf_len, char* key, int key_len)
{
int ki = 0;
for (int bi = 0; bi < buf_len; bi++)
{
buffer[bi] ^= key[ki++];
if (ki >= key_len) ki = 0;
}
}
...
char* key = "secret";
char* str = "Say hello to my little friend!";
//Encrypt
xor_crypt(str, strlen(str), key, strlen(key));
Serial.println(str); //This will be "garbage" in the serial monitor
//Reverse
xor_crypt(str, strlen(str), key, strlen(key));
Serial.println(str); //This will be the original string again
Even though this form of encryption may seem crude, it may be just as hard to break as more advanced forms of encryption - but the performance impact is negligible.
What do you mean by "doesn't allow all the text"? The encrypted buffer is binary and null-characters may therefore occur. Since "strlen" searches for the first null-character, some of the string may be lost. The sollution is to store / remember how long the original string was instead of relying on strlen (which I wrongly did, code in #4 updated).
Danois90:
What do you mean by "doesn't allow all the text"? The encrypted buffer is binary and null-characters may therefore occur. Since "strlen" searches for the first null-character, some of the string may be lost. The sollution is to store / remember how long the original string was instead of relying on strlen (which I wrongly did, code in #4 updated).
Got it! it's working now, but facing another problem: I want to save the result into a json file using arduinoJson, save goes ok, but then, when i try to open the file, says invalid input. Maybe i have to convert the crypt result to hex first to save, and then back to how it was to decrypt? Can you help me?
[출처] https://forum.arduino.cc/t/crypt-json-content/592375/7
[아두이노 arduino] 아두이노 json 암호화: Crypt json content
Hi everyone,
I am doing a software on a ESP8266 which stores json files in the flash memory. I wanted somehow to crypt some json properties inside the file so that if someone access it doesn't ready my data (example: a username / password of mqtt server). I have google a lot for the last few days but without any succes. Can someone point me to what library should i use in order to do this ? thanks!
This is sort of hard to do, because you have to store the key to decrypt it somewhere... so if they've dumped the flash, they have the information needed to decrypt it...
Though there is probably some merit to at least a passing attempt to obfuscate it, so it doesn't jump out at someone snooping around in the flash - but if they've got the flash contents, a dedicated adversary will be able to get the sensitive data out of it... I mean, they could just write it to their own board, and see what requests it sends, and get the data that way if they wanted to.
There are AES libraries for Arduino / ESP8266 which can do the job - but they introduce a performance and storage impact. You could use some very basic bit inversion instead:
void xor_crypt(char *buffer, int buf_len, char* key, int key_len) { int ki = 0; for (int bi = 0; bi < buf_len; bi++) { buffer[bi] ^= key[ki++]; if (ki >= key_len) ki = 0; } } ... char* key = "secret"; char* str = "Say hello to my little friend!"; int str_len = strlen(str); //Remember this value in order to ensure proper decryption! //Encrypt xor_crypt(str, str_len, key, strlen(key)); Serial.println(str); //This will be "garbage" in the serial monitor //Reverse xor_crypt(str, str_len, key, strlen(key)); //Do NO rely on "strlen" for "str" here! Serial.println(str); //This will be the original string again
Even though this form of encryption may seem crude, it may be just as hard to break as more advanced forms of encryption - but the performance impact is negligible.
EDIT: Bug in code fixed.
vaz83:
The idea would be storing the key in the code itself, but leaving some json files on the flash memory encrypted. I know there is always a way, but at least i am protecting my data at some sort of level. Can you point me in any direction ?
Then on the other hand this is just obfuscation as DrAzzy said. You could store the key on an external EEPROM chip or an sd card which you insert before operation and remove after operation (much like online banking dongles work).
Hi Danois, thanks! This is the direction i wanna take.
I was trying the code you sent, which works fine, but what i want to crypt is something i will read and send to the function. I have made this:
char* key = "secret"; void xor_crypt(char *buffer, int buf_len, char* key, int key_len) { int ki = 0; for (int bi = 0; bi < buf_len; bi++) { buffer[bi] ^= key[ki++]; if (ki >= key_len) ki = 0; } } void crypt(char * input) { xor_crypt(input, strlen(input), key, strlen(key)); Serial.println(input); //Crypted xor_crypt(input, strlen(input), key, strlen(key)); Serial.println(input); //Descripted delay(5000); }
What happens now is that when i pass the text i want to crypt, when i then decrypt it, it doesn't show all the text
Danois90:
There are AES libraries for Arduino / ESP8266 which can do the job - but they introduce a performance and storage impact. You could use some very basic bit inversion instead:void xor_crypt(char *buffer, int buf_len, char* key, int key_len)
{
int ki = 0;
for (int bi = 0; bi < buf_len; bi++)
{
buffer[bi] ^= key[ki++];
if (ki >= key_len) ki = 0;
}
}
...
char* key = "secret";
char* str = "Say hello to my little friend!";
//Encrypt
xor_crypt(str, strlen(str), key, strlen(key));
Serial.println(str); //This will be "garbage" in the serial monitor
//Reverse
xor_crypt(str, strlen(str), key, strlen(key));
Serial.println(str); //This will be the original string again
Even though this form of encryption may seem crude, it may be just as hard to break as more advanced forms of encryption - but the performance impact is negligible.
What do you mean by "doesn't allow all the text"? The encrypted buffer is binary and null-characters may therefore occur. Since "strlen" searches for the first null-character, some of the string may be lost. The sollution is to store / remember how long the original string was instead of relying on strlen (which I wrongly did, code in #4 updated).
Danois90:
What do you mean by "doesn't allow all the text"? The encrypted buffer is binary and null-characters may therefore occur. Since "strlen" searches for the first null-character, some of the string may be lost. The sollution is to store / remember how long the original string was instead of relying on strlen (which I wrongly did, code in #4 updated).
Got it! it's working now, but facing another problem: I want to save the result into a json file using arduinoJson, save goes ok, but then, when i try to open the file, says invalid input. Maybe i have to convert the crypt result to hex first to save, and then back to how it was to decrypt? Can you help me?
[출처] https://forum.arduino.cc/t/crypt-json-content/592375/7
광고 클릭에서 발생하는 수익금은 모두 웹사이트 서버의 유지 및 관리, 그리고 기술 콘텐츠 향상을 위해 쓰여집니다.
댓글 0
| 번호 | 제목 | 글쓴이 | 날짜 | 조회 수 |
|---|---|---|---|---|
| 1 | KiCAD: Advanced Tutorials:Arduino UNO with KiCAD | 졸리운_곰 | 2017.08.02 | 582 |