Mocana is shipping an IPsec/IKE implementation said to offer enterprise-grade security on resource-contrained embedded devices, without compromising functionality. “Embedded IPsec/IKE” features a 60KB footprint, and an asynchronous architecture aimed at better exploiting hardware security protocol acceleration. It supports Linux, and targets secure, networked devices such as VoIP equipment.

Embedded IPsec/IKE is part of Mocana's Embedded Security Suite, which also includes an SSL/TLS server, SSL/TLS client, and SSH server. Multiple components of the Suite can share the same crypto library to reduce the footprint. The suite was launched in June, and targets perimeter security devices as well as general-purpose devices that require secure interfaces.

Embedded Security Suite architecture
Mocana says Embedded IPsec/IKE can secure communications between any two networks or hosts, ensuring data integrity and providing origin authentication, data confidentiality, access control, partial sequence integrity, and traffic flow confidentiality. The product features an asynchronous architecture said to speed communication, cut latency, and better leverage hardware acceleration than IPsec products based on a synchronous architecture and open source software.

The product includes IKE (Internet key exchange), and can perform automatic key negotiation. It supports major cryptographic algorithms, is CPU- and architecture-independent, and utilizes minimal CPU resources, the company says. And, it is easy to install and use, via a simple API said to hide cryptographic complexities.

Mocana CEO Adrian Turner said, “Customers told us that existing products were difficult to integrate and use, lacked in performance, and didn't give them the flexibility to secure network devices with varying levels of memory capacity.”

Prabh Deep Singh, VP of R&D at Navtel Communications, said, “Mocana's ease of use, scalability and small footprint [are] becoming increasingly important to today's global VoIP market demands.”

Availability

Mocana Embedded IPsec/IKE is available now, with maintenance and support, both separately or as part of the Embedded Security Suite. Free evaluation software downloads are available here. Mocana also offers training, customized development, and porting services.

---

 
This article was originally published on LinuxDevices.com and has been donated to the open source community by QuinStreet Inc. Please visit LinuxToday.com for up-to-date news and articles about Linux and open source.