Looking for a Wifi module with SSL/HTTPS

[zapta]

I am looking for a wifi module that can connect with a host MCU (e.g. Arduino ATMEGA328P) via SPI or I2C and supports SSL/HTTPS. Having on board antenna is a plus.

So far I found one from Connect One that is very good but not cheap ($40) and one from Ack.me ($20) but its datasheet says that SPI is not fully supported in the current version.

Will appreciate any suggestion.

http://www.mouser.com/ProductDetail/Connect-One/iW-SMG2SMT-OB/?qs=sGAEpiMZZMsRr7brxAGoXShZcShSKXkGCiEwkdaO1Va4ccyyVXpntA%3d%3d

https://ack.me/products/AMW004_Wallaby

[LukeW]

I think the new TI CC3100/CC3200 support SSL on board, but I don't know if the distributors have silicon availability yet.

[zapta]

I think the new TI CC3100/CC3200 support SSL on board, but I don't know if the distributors have silicon availability yet.

Yes, CC3100/CC3200  look good. Mouser says it will be available in Q1/2015.  How difficult is it for a non RF guy do use it in design?  (FCC and maximizing range are not required).

[FawzyTaha]

I think this module can help you with your requirements. It is WizFi210 - Ultra Low Power Wifi module ( "Serial to WiFi" ) . it supports HTTPS.

http://www.saelig.com/product/BRD027.htm

[zapta]

I think this module can help you with your requirements. It is WizFi210 - Ultra Low Power Wifi module ( "Serial to WiFi" ) . it supports HTTPS.

http://www.saelig.com/product/BRD027.htm

This looks good. Thanks. Detailed documentation, module and arduino sheilds and eagle open source layouts. I will give it a try.

I got a Ack.me shield from Mouser but apparently they ship partially implemented units that do not support MCU/SPI interface. It will go back to Mouser.

Edit: here is the github repository of the shield if anybody is interested  https://github.com/Wiznet/WizFiShield/blob/master/README.md

[splin]

How do you keep the firmware up to date to keep it secure?

Are these SSL implementations based on open software? If not, is it independantly certified and how often?

Do the silicon vendors have a good track record of quickly releasing updates when vulnerabilities are discovered such as Heartbleed?

Eg. look at the number of security vulnerabilities found in openssl - currently 104 since it started and 23 this year alone! Some of those probably won't apply to embedded solutions but many will.

http://www.cvedetails.com/product/383/Openssl-Openssl.html?vendor_id=217

I don't pretend to know the answer to this - it's a difficult problem. It's hard enough to get people to apply patches when all they have to do is click 'Windows Update' let alone finding, downloading and updating the firmware on maybe dozens, hundreds or even thousands of embedded devices. Assuming they even know it needs to be done and where to find the updates. Made worse by the threat that the update might brick your equipment because it contains a counterfeit IC....

Also assuming the manufacturer hasn't gone out of business and is still supporting the product - eg. look at how many updates typical Android smartphones get from the major manufacturers - one, maybe two, three if you're lucky? A lot of equipment is expected to carry on functioning for decades, not just until the first security vulnerability renders it unsafe to use.

And many organizations wouldn't let you apply updates to equipment, which may be critical to their business, without putting it through extensive  and expensive validation testing.

Tony H

[RABeng224]

Have a look at the GS2K based modules GS2011 and GS2100 from Gainspan.  They support SSL and have good documentation.  However you will need to sign an NDA so if you are only looking for 1 or 2 for a side project it may be overkill.

I have a project using the GS2100 now and it I am pleased with the performance. 

[apelly]

SSL & HTTPS are different layers to the wifi. Combining them sounds unnecessarily complex. And expensive. Why not use a dumb wifi module and use a library to implement these on an ARM or similar?

[zapta]

SSL & HTTPS are different layers to the wifi. Combining them sounds unnecessarily complex. And expensive. Why not use a dumb wifi module and use a library to implement these on an ARM or similar?

I plan to use it with a atmega328p arduino. Any recomandation for a library that can add SSL/HTTPS functionality? How much resources does it take?

[zapta]

How do you keep the firmware up to date to keep it secure?

This is a good question. Connect One for example allows to update the firmware

http://www.connectone.com/?page_id=178

They were in the IOT space long before that term was coined. In my specific case, tight security and long term deployment are not critical requirements, it's more a proof of concept, I an need SSL just because the infrastructure requires it.

[Howardlong]

I think the new TI CC3100/CC3200 support SSL on board, but I don't know if the distributors have silicon availability yet.

Yes, CC3100/CC3200  look good. Mouser says it will be available in Q1/2015.  How difficult is it for a non RF guy do use it in design?  (FCC and maximizing range are not required).

They will also have modules which I assume will be pre-compliance tested.

I've been using the CC3200 and CC3100 for a few months now, but only on the boosterpacks, there is no standalone silicon available yet. The CC3200 includes an integrated ARM core, whereas the CC3100 is designed to hook up to an extenal microcontroller through SPI. Most of my work has been on the CC3100 with a non-TI microcontroller. Porting the API from TI was reasonably simple and is positively encouraged. In contrast, Microchip's WiFi modules are only supposed to be used with Microchip parts.

I have managed sustained 14Mbps UDP throughput with both the CC3100 and CC3200. The Microchip WIFI 802.11g modules are lucky to make 5Mbps, and even at that rate your processor has to be paying full attention to the SPI bus that the device is connected to with almost nothing left over for anything else.

The methods TI have to allow connection to the CC3x00 are quite clever although I am not sure how robust some of the methods would work for non-technical end users.

But as has been said, there is no production silicon yet for the CC3x00 and the distributor release date keeps receding, while TI are saying nothing. It is quite possible they're stuck in compliance testing woes. I am contemplating releasing a product with a set of pin headers that just so happen to mate with the $20 dev module. Not a use case for my own compliance testing of course ;-)

Edit to add: Regarding using in your own design, either use the forthcoming (expensive) module, or start with the dev board aka booster pack as a starting point, and make sure your board layers are the same. From my own experience, the best way to learn about what works and what doesn't is by doing. Having equipment and methodologies to confirm your designs quantitatively is essential for producition stuff, not so much for hobby stuff. There is also a world of difference between fiddling around with short wave stuff and 2.4GHz.

[EK701]

Take a look at the Bluegiga WF121 wifi module.  It looks like it supports HTTPS/SSL from looking at the documentation. https://www.bluegiga.com/en-US/products/wifi-modules/wf121-wifi-module/  they are about $30/ea in single units from Mouser, DigiKey, etc.

A breakout board is available here:  https://oshpark.com/shared_projects/9vAB5zCG

I have a WF121 but I haven't used it, yet.

[bingo600]

At those prices i'd prob use a RasPI w. a wifi dongle as gateway 

/Bingo

[zapta]

At those prices i'd prob use a RasPI w. a wifi dongle as gateway 

/Bingo

Too big. The end result will be a small custom board with awifi module and a atmega328p, that pretends to be an arduino pro micro.