Security setup IC and using encryption

Forum Rules

Before commenting read Forum rules

Don't comment the topic if you have a new question.

You can create a new topic selecting correct category from Gurux Forum and then create a new topic selecting "New Topic" from the top left.

By MNN , 26 November, 2019
Forums
DLMSDirector

Good day.
Please tell me if Gurux.Direct has encryption support
"AES-GCM-128 authenticated encryption, ECDSA P-256 digital signature, ECDH P-256 key agreement, SHA-256 hash, V.44 compression and AES-128 key wrap" and "AES-GCM-256 authenticated encryption, ECDSA P-384 digital signature, ECDH P-384 key agreement, SHA-384 hash, V.44 compression and AES-256 key wrap"?
How can I configure?
Thank you.

MNN

6 years 6 months ago

Please tell me, in article http://www.gurux.fi/Gurux.DLMS.Secure was mentioned asymmetric cryptography does not support in C#, does this mean that it isn't to use the component Gurux.DLMS, support this encryption?
And if all the same support for encryption is, how can it configure?
If execute "Activate" an error occurs "Unacceptable frame" (IC SecuritySetup):
"System.Data.InvalidExpressionException: Исключение данных Data Exception.
в Gurux.DLMS.UI.GXValueField.get_Value()
в Gurux.DLMS.UI.GXDLMSSecuritySetupView_v1.OnGetValue(GXActionArgs arg)".

And how can I use certificates? How add certificate in GXDLMSDirector or how can I use method 5 (IC SecuritySetup)?

Thank you.

Kurumi

6 years 6 months ago

Hi,
There are no certificates in AES-GCM-128.
You need to set the authentication key, block cipher key and system title to make GMAC ciphering work.

Only AES-GCM-128 is supported and I don't know that any of the meters is supporting V.44 at the moment.

Only java version is supporting asymmetric cryptography at the moment.

Most of the meters are supporting only GMAC at the moment.

BR,
Mikko

Litvinenko Ilia

4 years 2 months ago

Good afternoon, Mikko!

We already have meters with GMAC and AES256.
Do you have plans to support 32-character symmetric keys?

Thank you.

Kurumi

4 years 2 months ago

Hi Litvinenko Ilia,

A couple of questions.

Are you using keys for authentication and encryption or key agreement?
Is your meter supporting Security Suite 1 or 2?

BR,
Mikko

Litvinenko Ilia

4 years 2 months ago

Hi, Mikko

We use keys for authentication and encryption.
The meter uses Security Suite 2 in order to be able to use 256 bit keys.

Thank you.

Kurumi

4 years 2 months ago

Hi,

You should be able to use security suite 2 with GXDLMSDirector. Let me know if you have any problems.

BR,
Mikko

Kurumi

4 years 2 months ago

Hi,

Ok. Now I realize the problem. You are not using a certificate and this is causing the problem.
When I read your previous post, I notice that you told that you use symmetric keys.

This is fixed, but it will take a few weeks before it can be released.

BR,
Mikko

Litvinenko Ilia

4 years 2 months ago

Hi, Mikko

I will wait for a new release.

Thank you.

Litvinenko Ilia

4 years 1 month ago

Litvinenko Ilia
Hi, Mikko

Have you been able to improve your program?
And then I have a meter for testing purposes.

BR, Ilia

Kurumi

4 years 1 month ago

Hi Ilia,

This is not released yet. I can't say the exact day, but it's taking time.
Changes in meter communication are always hard to test because the variation is huge and it takes time.

BR,
Mikko

vishvender

3 years 12 months ago

Hi Mikko,
do we have any update on release for mentioned issue in this post ?

I have encountered similar issue with version 8.2.2205.1801 .
We need to configured 256bit Encryption and authentication keys with security suite 2 .

Kurumi

3 years 12 months ago

Hi,

It's not released yet and I can't say the exact day when it's released.

BR,
Mikko

vishvender

3 years 6 months ago

Hi Mikko,
do we have any update on above mentioned feature release ?

Thanks & regards
Vishvender

Kurumi

3 years 6 months ago

Hi Vishvender,

Our customers are requesting new features. Because they are paying for all this, we need to implement those features first.

I can't say the date when this can be released.

BR,
Mikko

Pavol Rybárik

2 years 9 months ago

Hi, I am using latest GXDLMSDirector, and I am not able to enter AES256 key in the Device properties as it is shown on the picture above. I am able to enter the AES128 key only. My meter is using SS2 for cyphering and LLS (no HLS). Please is this my mistake or are you going to change something (no matter when)?
Thank you, Pavol

Kurumi

2 years 9 months ago

Hi Pavol,
Please, create a new topic if you have a new question. GXDLMSDirecor does not support Security Suite 2 at the moment.

BR,
Mikko