Inferno Security Modules and Utilities

---

Note: U.S. Department of Commerce and U.S. State Department regulations restrict the export of certain security algorithms. These restricted algorithms include DES and RC4 (with key length greater than 40 bits). Anyone wanting to purchase Inferno with DES and a version of RC4 supporting a key size greater than 40 bits should contact Lucent Technologies at the phone number listed in the readme file delivered with Inferno.

---

Organization of this chapter

A summary of the Inferno related components of security is found in Summary of Security Modules, Commands, Daemons and Abstract Data Types.

The security modules, functions, commands and daemons are arranged in several categories as shown below. They are described in the last part of this chapter.

Authentication, Login Functions

Auth module - authenticated connections

auth, readauthinfo, writeauthinfo - authenticate a connection

getauthinfo - obtain a certificate for authentication

Login module - communicate with certificate authority

logind - login daemon

verify - command to authenticate receiver of blinded certificate

Password Management

changelogin - command to create/update the password file

get, put - read and write password entries in the password file

Key Management

certtostr, pktostr, sktostr, strtocert, strtopk, strtosk -encryption key conversion functions

createsignerkey - create signer key on authentication server

genSK, genSKfromPK, sktopk, dhparams - generate keys

Secure Sockets Layer (SSL)

connect, secret - interface to the Secure Sockets Layer device

I/O

getstring, putstring, getbytearray, putbytearray, puterror- delimited I/O

Set-top Box Functions

manufacture - command to emulate set-top-box-id in ROM

register - command to register set-top-box identity with signer

signer, countersigner - daemons for set-top box authentication

Cryptography

sha, md5, sign, verify - cryptographic digests and digital signatures

Utilities

IPint adt - 'infinite' precision integer utility functions

randomint, randombuf - interface to random number device