UNiD
Automate device security provisioning with edge intelligence
Features
- Decentralized PKI(DPKI), DIDs, DKMS, and Credential Management
- End-to-End Encrypted Communication (TLS1.3)
- Programmable Hardware Root of Trust
- Overlay Routing
- Cloud Add-Ons for Real-time Data Flow and Processing
Introduction
Hardware Root of Trust is the security foundation for an SoC, other semiconductor device or electronic system. The RoT contains the keys for cryptographic functions and is usually a part of the secure boot process providing the foundation for the software chain of trust. UNiD is a set of libraries written by Rust that can leverage the RoT and decentralized identity technology to autonomously generate key pairs, register the credentials on a decentralized PKI, and build end-to-end secure channel by the TLS handshake protocol. This capabilities reduce the development cost of device security, increase flexibilities, and facilitates real-time data flow and processing.
Overview
By abstracting every device and cloud as globally unique endpoints and building an E2E secure channel, each endpoint can send encrypted messages regardless of the network topology or routing hops.
Required Software:
- Wasm-pack: Build rust-generated WebAssembly and make it work with JavaScript, either in the browser or with Node.js.
Steps:
- Install wasm-pack
curl https://rustwasm.github.io/wasm-pack/installer/init.sh -sSf | sh
for more info: https://rustwasm.github.io/wasm-pack/installer/
- Build the rust code into wasm code
- For web:
wasm-pack build --target web
- For nodejs:
wasm-pack build --target nodejs
After you build for specific target, you can import the exported classes from 'pkg/cipher_lib.js'
Exported Classes and included methods:
1. Cipher
1.1 encrypt
encrypt given utf-8 text input with a secure utf-8 key input into a base64 encrypted string.
const encrypted = Cipher.encrypt("hello", "secret");
console.log(encrypted); //gives aes encrypted base64 string
1.2 decrypt
decrypt given base64 encrypted string input with the correct secure utf-8 key input to get the original utf-8 text
const decrypted = Cipher.decrypt(encrypted, "secret"); //encrypted is base64 encrypted string from previous encryption
console.log(decrypted); //gives the original text i.e. "hello"
2. Hasher
2.1 digest
create base64 hash string from a given utf-8 text input and a secure utf-8 key input.
const hashed = Hasher.digest("hello", "secret");
console.log(hashed); //gives hmacsha512 hashed base64 string
2.2 verify
verify if the given base64 hash string is the correct hash output for the given pair of utf-8 text input and secure utf-8 key input.
const isCorrectHashed = Hasher.verify("hello", hashed, "secret"); // hashed is base64 hashed string from previous hashing
console.log(isCorrectHashed); // returns true
3. Signer
3.1 sign
sign a given utf-8 string input with a base64 string secret key and get a base64 string ecdsa signature.
3.2 verify
verify if the given base64 string signature is the correct signature for the given pair of utf-8 string input and a base64 string public key.
4. Jws
4.1 encode
encode a given object input with a base64 string secret key and get a base64 string ecdsa signature.
4.2 verify
verify if the given base64 string signature is the correct signature for the given pair of object input and a base64 string public key.
5. Credential Signer
5.1 sign
encode a given object input with signing suite object and get the signed object.
5.2 verify
verify if the given signed object is valid or not.
Unit Testing
There are two types of unit test depending on the target:
- Native test (excluding wasmbindgen's test)
cargo test
- Wasm-pack test (only wasmbindgen's test)
wasm-pack test --node
![[release] bump up to 1.0.0](https://avatars.githubusercontent.com/in/15368?v=4)
316 Nov 22, 2022
15 Dec 16, 2022
109 Dec 13, 2022
172 Jan 2, 2023
2.2k Jan 8, 2023
1.2k Jan 5, 2023
11 Dec 16, 2022
2 Dec 18, 2022
1 Oct 21, 2021
5.5k Jan 1, 2023
33 Dec 4, 2022
7k Jan 7, 2023
2 Apr 27, 2022
132 Jan 6, 2023
3 Jun 23, 2021
1 Oct 20, 2022
89 Nov 9, 2022
4.3k Dec 28, 2022