Spark Sprint 4 Review: Wow, much reliable, so betterblog.spark.io2 points·by towynlin·hace 12 años·0 comments
towynlin·hace 13 años·discussGreat suggestion! I just added this as a security overview section of the README.https://github.com/spark/core-communication-lib
towynlin·hace 13 años·discussRSA encrypt initial handshake message to cloud: https://github.com/spark/core-communication-lib/blob/master/...Return message from cloud is decrypted with an RSA private key on the Core: https://github.com/spark/core-communication-lib/blob/master/...An HMAC signature is verified: https://github.com/spark/core-communication-lib/blob/master/...If everything checks out, AES-128-CBC session key is saved and IV is rotated with every message exchanged:encrypt: https://github.com/spark/core-communication-lib/blob/master/...decrypt: https://github.com/spark/core-communication-lib/blob/master/...Cheers, Zachary Crockett Spark CTO ;)
https://github.com/spark/core-communication-lib