Jump to content

Draft:TrustCore SDK

From Wikipedia, the free encyclopedia
  • Comment: In accordance with the Wikimedia Foundation's Terms of Use, I disclose that I have been paid by my employer for my contributions to this article. Khilscher (talk) 19:20, 25 April 2026 (UTC)

DigiCert TrustCore SDK is a compact, cross-platform, security library for embedded developers building IoT devices. TrustCore SDK is an open source implementation of TLS (SSL 3.0, TLS 1.0, 1.1, 1.2, 1.3, and DTLS 1.2, 1.3) written in the C programming language. It includes the following client and server modules:

  • NanoSSH SSH 2 client and server optimized for remote access and secure file transfers, supporting X.509 v3 certificate-based authentication.
  • NanoTAP Abstraction layer for integration with TPMs and HSMs.
  • NanoSSL Light-weight SSL/TLS library designed for resource-constrained devices, offering SSL 3.0, TLS 1.0, 1.1, 1.2, 1.3, DTLS 1.2, 1.3 support.
  • NanoCrypto Delivers comprehensive symmetric and asymmetric cryptographic capabilities for embedded systems with limited resources and support for the latest quantum-safe algorithms (ML-KEM, ML-DSA and SLH-DSA).
  • NanoSec IP layer security leveraging Internet Key Exchange (IKE) for IPsec, ensuring encrypted and authenticated IP communications.
  • OpenSSL Connector Compatibility layer for applications using OpenSSL APIs, enabling seamless integration with NanoSSL. Support for numerous OpenSSL versions from 1.x to 3.5.
  • NanoEAP Robust EAP implementation supporting both passthrough and standalone modes for efficient authentication.
  • NanoSMP Security Module Plugin for TPM 2.0/1.2, offering simplified integration via the NanoTAP interface.
  • NanoROOT A software root of trust utilizing Physical Unclonable Function (PUF) technology to create immutable device identity based on a device's unique hardware fingerprint.

Platforms

[edit]

TrustCore SDK has been ported to Linux, Windows, Zephyr, FreeRTOS and Intel, ARM, STM-32, and ESP-32 microcontrollers.

FIPS 140-2 / 140-3

[edit]

TrustCore SDK NanoCrypto module maintains active NIST FIPS 140-2 certification (certificates #4298 and #4299) and FIPS 140-3 certification (interim certificates #4761, #4818). TrustCore SDK offers a FIPS Validation-as-a-Service offering that allows OEM devices to be FIPS-certified.

History

[edit]

TrustCore SDK was acquired with the DigiCert acquisition of Mocana in January, 2022[1]. TrustCore SDK was open-sourced by DigiCert in August, 2025[2].

References

[edit]
  1. ^ Inc, DigiCert. "DigiCert Acquires IoT Cybersecurity Provider Mocana". www.prnewswire.com. Retrieved 2026-04-25. {{cite web}}: |last= has generic name (help)
  2. ^ DigiCert (2025-08-06). "DigiCert Releases Open Source TrustCore SDK for Developers". GlobeNewswire News Room. Retrieved 2026-04-25.