bose-sanjoy / ockam

End-to-end encrypted messaging and mutual authentication between cloud services and edge devices

InfluxDays 2020 - Ockam Demo: End-to-end encrypted connections between Telegraf and InfluxDB.

---

Try a demo | Learn | Discuss | Contribute | Join The Team

---

Ockam is a suite of tools, programming libraries and infrastructure that make it easy to build devices that communicate securely, privately and trustfully with cloud services and other devices.

Features

• End-to-end encrypted messages.
• Mutually authenticated secure channels.
• Key Lifecycle and Credential Exchange protocols.
• Add-Ons for a variety of transport protocols, hardware cryptography, and enterprise integrations.
• Libraries for multiple languages - C, Rust, Elixir (more on the roadmap).

---

---

We believe that Security, Privacy and Trust are application layer concerns and IoT developers should have simple tools to granularly control these aspects of their applications.

Cryptographic protocols can be a powerful tool to solve many complex, real world challenges in deploying dependable IoT at scale. Such protocols, however, must be designed and implemented with extreme care.

In Ockam, we're taking proven cryptographic building blocks and applying them to build solutions for common IoT and edge computing problems like:

• Secure, easy and rapid enrollment of large fleets of devices.
• Scalable provisioning, proof of possession, rotation, and revocation of identity keys and credentials.
• End-to-end encrypted communication over low-bandwidth, intermittently connected, multi-protocol IoT network topologies.

Our goal is to provide this functionality in multiple programming languages with secure, high level application interfaces that are easy to use correctly and hard to misuse.

An introduction to the core concepts.

License

This code is licensed under the terms of the Apache License 2.0.