The SimpleLink Wi-Fi CC3130
Internet-on-a chip device enhances the security capabilities available for
development of IoT devices, while completely offloading these activities from the
MCU to the networking subsystem. The security capabilities include the following key
features:
Code and Data Security:
- Secured network information:
Network passwords and certificates are encrypted
- Secured and authenticated service
pack: SP is signed based on TI certificate
Wi-Fi and Internet
Security:
- Personal and enterprise Wi-Fi
security
- Personal standards
- AES
(WPA2-PSK)
- TKIP
(WPA-PSK)
- WEP
- Enterprise standards
- EAP Fast
- EAP PEAPv0
MSCHAPv2
- EAP PEAPv0
TLS
- EAP PEAPv1 TLS
EAP LS
- EAP TTLS TLS
- EAP TTLS
MSCHAPv2
- Secure HTTP server (HTTPS)
- The Trusted root-certificate
catalog verifies that the CA used by the application is trusted and known secure
content delivery
- The TI root-of-trust public key is a hardware-based mechanism
that allows authenticating TI as the genuine origin of a given content using
asymmetric keys
- Secure content delivery allows
file transfer to the system in a secure way on any unsecured tunnel
- Secure sockets
- Protocol versions: SSL
v3/TLS 1.0/TLS 1.1/TLS 1.2
- On-chip powerful crypto
engine for fast, secure Wi-Fi and internet connections with 256-bit AES
encryption for TLS and SSL connections
- Ciphers suites
- SL_SEC_MASK_SSL_RSA_WITH_RC4_128_SHA
- SL_SEC_MASK_SSL_RSA_WITH_RC4_128_MD5
- SL_SEC_MASK_TLS_RSA_WITH_AES_256_CBC_SHA
- SL_SEC_MASK_TLS_DHE_RSA_WITH_AES_256_CBC_SHA
- SL_SEC_MASK_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
- SL_SEC_MASK_TLS_ECDHE_RSA_WITH_RC4_128_SHA
- SL_SEC_MASK_TLS_RSA_WITH_AES_128_CBC_SHA256
- SL_SEC_MASK_TLS_RSA_WITH_AES_256_CBC_SHA256
- SL_SEC_MASK_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
- SL_SEC_MASK_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
- SL_SEC_MASK_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
- SL_SEC_MASK_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
- SL_SEC_MASK_TLS_RSA_WITH_AES_128_GCM_SHA256
- SL_SEC_MASK_TLS_RSA_WITH_AES_256_GCM_SHA384
- SL_SEC_MASK_TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
- SL_SEC_MASK_TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
- SL_SEC_MASK_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
- SL_SEC_MASK_TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
- SL_SEC_MASK_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
- SL_SEC_MASK_TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
- SL_SEC_MASK_TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
- SL_SEC_MASK_TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
- SL_SEC_MASK_TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256
- Server
authentication
- Client
authentication
- Domain name
verification
- Socket upgrade to secure
socket – STARTTLS