2009-04-20 02:30:15     lockbox for uClinux dist

2009-04-20 02:30:15     lockbox for uClinux dist

baihuawen xiao (CHINA)

Message: 72840   

hello,

I got an example for how to use lockbox in vdsp.

but how can I use it for uClinux dist.

Thanks.

TranslateQuoteReplyEditDelete

2009-04-20 03:33:48     Re: lockbox for uClinux dist

Yi Li (CHINA)

Message: 72842   

Currently No. In what kind of situation do you want to use Lockbox in uclinux?

QuoteReplyEditDelete

2009-04-20 03:46:25     Re: lockbox for uClinux dist

baihuawen xiao (CHINA)

Message: 72843   

If no, then how can I do for it? Is there any other  solution for IP protection.

I want to protect my product design and protect the software application from mass copy.

Thanks for your attention,YI

TranslateQuoteReplyEditDelete

2009-04-20 03:51:34     Re: lockbox for uClinux dist

baihuawen xiao (CHINA)

Message: 72844   

And, do you have schedule for this issue? When can we get the release version for it?

TranslateQuoteReplyEditDelete

2009-04-20 05:58:42     Re: lockbox for uClinux dist

Sonic Zhang (CHINA)

Message: 72858   

Please track changes here https://blackfin.uclinux.org/gf/project/uclinux-dist/tracker/?action=TrackerItemEdit&tracker_item_id=4935

As it says, this is planned for 2009R2 or 2010 release. This feature only avoid invalid copy from flash, but not reliable if a senior hacker has a hardware DRAM emulator.

QuoteReplyEditDelete

2009-04-20 08:05:55     Re: lockbox for uClinux dist

Robin Getz (UNITED STATES)

Message: 72868   

Baihuawen:

Everytime we have talked to people about LockBox + Linux - everyone comes to the conclusion Lockbox was not the solution they wanted.

What are you trying to protect? (userspace code?) and how do you think it might work within a OS framework?

-Robin

QuoteReplyEditDelete

2009-04-20 22:23:30     Re: lockbox for uClinux dist

baihuawen xiao (CHINA)

Message: 72917   

Robin,

In my case, not only userapce code, but also some drivers(as loadable modules) need protection.And I want to use the CPU-ID to protect mass copy. So the modules and applications should be encrypted , and before they can execute, they should be decrypted. Is this process differ with lockbox?

If lockbox can't meet this needs, maybe need some change?

Then, what's the plan of the task 4935? Don't it protect the userspace code?why not?

Thanks very much,Robin

-baihuawen

TranslateQuoteReplyEditDelete

2009-04-21 07:47:07     Re: lockbox for uClinux dist

Robin Getz (UNITED STATES)

Message: 72975   

Baihuawen:

Lockbox was never architected to protect anything that could not 100% fit into internal memory. That is pretty difficult to do with anything in the Linux kernel.

Task 4935 is find someone (maybe you) who understands what Lockbox can/can't do - and implment something that will work.

I can always break your code which exists in external memory. It just depends on how hard you want to make it for me. It will never be impossible - anyone who tells you different is selling snake oil.

  en.wikipedia.org/wiki/Snake_oil_(cryptography)

-Robin