Mbed TLS

[English]

Overview

MbedTLS is a crypto algorithm library for embedded systems, which mainly implements basic crypto algorithms, X.509 certificate operations, SSL/TLS and DTLS protocols.

MbedTLS version

the currently supported version：3.5.2

MbedTLS introduction

API Reference

KnowledgeBase

TE200（TrustEngine-200）Introduction

BK7258 uses TE200 (TrustEngine-200) as the hardware acceleration engine, providing the following security features:

  • High security assurance. TE200 supports key hierarchy, lifecycle management, and true random number generator (TRNG) to enhance system security.

  • High-performance and low-power encryption/decryption operations. This is achieved through the internal cryptographic engine of TE200.

  • Reduced software complexity in security aspects. TE200 implements some security functions, such as lifecycle management and access control to OTP1.

TE200 Features

TE200 supports the following features:

  • Symmetric encryption algorithms:：AES-ECB/CBC/CTR/CBC-MAC/CMAC/CCM/GCM（密钥长度为128位、192位和256位）

  • Symmetric encryption algorithms:：SM4-ECB/CBC/CTR/CBC-MAC/CMAC/CCM/GCM

  • Hash algorithms：SHA1/224/256

  • Hash algorithms：SM3

  • Asymmetric encryption algorithms：RSA 1024/2048/3072/4096 和 ECCP 192/224/256/384/512/521

  • Asymmetric encryption algorithms：SM2

  • Key ladder for key management

  • Life cycle management

  • True random number generator.

  • One Time Programming (OTP).

Supported Standards and Specifications

TrustEngine is compliant with the following standards:

  • FIPS PUB 180-4: Secure Hash Standard (SHS)

  • FIPS PUB 197: Advanced Encryption Standard (AES)

  • NIST SP 800-38A: Recommended Methods and Techniques for Block Cipher Modes of Operation

  • NIST SP 800-38B: Block Cipher Mode of Operation Protocol - CMAC Mode for Authentication

  • NIST SP 800-38C: Block Cipher Mode of Operation Protocol - CCM Mode for Authentication and Privacy

  • NIST SP 800-38D: Block Cipher Operating Mode Protocols - Galois/Counter Mode (GCM) and GMAC

  • NIST SP 800-90B: Entropy Source Protocol for Random Bit Generation

  • GB/T 32918-2016: SM2 Elliptic Curve Public Key Cryptography Algorithm

  • GB/T 32905-2016: SM3 Password Hashing Algorithm

  • GB/T 32907-2016: SM4 block cipher algorithm

Among them: SM2 public key cryptography, SM3 cryptographic hash algorithm and SM4 block cipher algorithm are Chinese national standards.