Icon Labs
Iconfidant™ SSH
Secure Shell for the VxWorks Operating System

Overview

IconfidantTM SSH is a source code product implementing ssh and sftp client and server for embedded security for the VxWorks embedded operating systems. It implements SSHv1 and SSHv2 protocols with strong authentication and encryption.
Iconfidant SSH modules:

• ssh – basic rlogin/rsh-like client program.
• sshd – ssh login daemon.
• sftp – secure file transfer program for SSH1 and SSH2.
• sftp-server – sftp server subsystem is started by sshd.

Optimized for Embedded Systems

Iconfidant is written to work with embedded, multitasking operating systems. Iconfidant is multithreaded allowing multiple clients to operate in an embedded environment. The SSH interface is simplified with a logical API allowing developers to use Iconfidant libraries when writing SSH applications.

Iconfidant SSH is small. The binary image is 400KB for both client and server configurations. It provides fast execution minimizing CPU load.

Iconfidant is portable. Supported examples are provided for VxWorks, Linux and Solaris.

Features

• Secures network connections with SSHv1 and SSHv2 protocols
• Supports SSH Client and Server
• Source code product that targets thread friendly operating systems
• Royalty free
• Supports VxWorks versions 5.x and 6.x
• Adds SSH functionality to VxWorks systems using Wind River’s Rapid Control (Wind Manage) CLI and Web
• Strong authentication
• Multiple communication channel support
• Secure file transfers: copy, move, and delete
• Multiple authentication methods: Password, Public key
• Encryption algorithm support:
- AES (Rijndael) (128 /192 / 256-bit keys)
- 3DES (168-bit key)
- Twofish (128 /192 / 256-bit keys)
- Blowfish (128-bit key)
- Arcfour (128-bit key)
- CAST128 (128-bit key)
- DES (supported as a fallback)
• Hash algorithms: MD5, SHA1
• Public-key algorithms : DSA, RSA,
Diffie-Hellman
• Configurable session rekeying interval

Authentication and Encryption

Iconfidant implements DSA-based authentication and public-key cryptography for SSHv1 and SSHv2. It supports a suite of cryptography modules including DES, 3DES, BlowFish and AES.

- AES (Rijndael) (128 /192 / 256-bit keys)
- 3DES (168-bit key)
- Twofish (128 /192 / 256-bit keys)
- Blowfish (128-bit key)
- Arcfour (128-bit key)
- CAST128 (128-bit key)
- DES (supported as a fallback)

SSHv2 also provides MD5 and SHA1 hashing algorithms.

Secure File Transfer

Iconfidant provides sftp to support secure file transfer over the encrypted connection between client and server. File transfer can originate either in the client or in the server.

Support for Wind Manage CLI

Iconfidant SSH adds CLI security to Wind River’s WindManage (formerly RapidControl) CLI products. WindManage is a rapid application development tool that graphically builds embedded command line interface servers. Iconfidant SSH provides drop in support for VxWorks operating system. Iconfidant SSH has two packages for VxWorks: VxWorks w/WindManage and VxWorks native.