nRF52810 Cryptographic examples in order to build a robust gazell version, waiting for gazell library

[astella]

To the kind attention of Nordic support team,

As it was said https://devzone.nordicsemi.com/f/nordic-q-a/57531/sdk16-nrf52810-secured-gazell-keil

the secured gzll library is not ready for usage with nRF52810. The non secured version it works, as I also tested what is kindly provided in Nordic SDK16.

I'd like to ask to your security experts if it is ok to use your non secured gazell and build on it using Cryptographic examples. In particular I would like to use

gazell as a mean to exchange messages over the air, and ECDH Example to generate keys, ECDSA example to verify authenticity. AES example

to encrypt information. In my opinion these 3 are crucial examples. Do you think is is a good idea? Maybe as security experts do you see something in this

plan that it is very extremely bad in respect to a more consolidated implementation like it is the secured gazell library? Still, for nRF52810 it is not available.

So, may please have your recommendation about this argument? Thank you for your patient and important work.

Best regards

[Kenneth]

It is possible, but to make it secure with potential attack vectors (mitm, playback etc). is far from straight forward. I would have considered using the nRF52832 instead, it would save you a lot of work, and then you would get a solution that have been tested and verified. 

Best regards,
Kenneth

[astella]

Thank you very much for sharing your point of view. Very much appreciated. Yes, I think we will be considering the device you just mentioned.