Author Archive for Loren Shade

Allegro Discusses IoT Identity with One World Identity Podcast

by Loren Shade
November 7th, 2017

Allegro Software and One World Identity Discuss The Need For Strong IoT Identity

 

One World Identity sat down with Allegro Software to discuss the need for a strong identity in IoT applications. IoT devices are being hacked at an alarming rate. Once hacked, they are reprogramed to contribute to a much larger botnet often capable of DDOS attacks at a very large scale. Allegro’s VP of Marketing, Loren Shade, talks with Cameron D’Ambrosi on his podcast about how IoT manufacturers can take a proactive approach to securing their products.

 

Listen to the Podcast
Click the link to listen to the podcast [LISTEN]. 
Allegro’s white paper that discusses the “7 Key Elements to Proactive IoT Security” can be downloaded [HERE]

 

 

About Allegro
Allegro Software Development Corporation is a premier provider of embedded Internet software components with an emphasis on industry-leading device management, embedded device security, UPnP-DLNA networking, and the Internet of Things. Since 1996, Allegro has been on the forefront of leading the evolution of secure device management solutions with its RomPager embedded web server and security toolkits. Also an active contributor to UPnP and DLNA initiatives, Allegro supplies a range of UPnP and DLNA toolkits that offer portability, easy integration, and full compliance with UPnP and DLNA specifications. Allegro is headquartered in Boxborough, MA.

 

Contacts:
Loren Shade
VP Marketing
Allegro Software Development Corporation
978-264-6600
loren@allegrosoft.com

 

Categories News

Allegro Software Expands FIPS 140-2 Support For IoT Applications

by Loren Shade
August 1st, 2017

Allegro Software Expands FIPS 140-2 Support
For IoT Applications Needing Validated Cryptography in Military, Medical and Federal Environments

FIPS 140-2 validated cryptography specifically engineered for Military, Medical and Federal IoT applications

 

BOXBOROUGH, MA August 1, 2017 – Allegro Software, a leading supplier of Internet component software for the Internet of Things (IoT), today announced it has earned FIPS 140-2 level 1 validation on four additional platforms with the Allegro Cryptography Engine, ACETM from the U.S. government’s National Institute of Standards and Technology (NIST). This marks the culmination of Allegro’s largest validation effort to date with the U.S. government. Specifically engineered for the rigors of resource constrained IoT computing environments, ACE enables manufacturers to leverage standards-based cryptography in IoT environments with ease. ACE is ideally suited for use in embedded systems and IoT applications in the military, energy, medical and communications industries.

 

ACE AND FIPS 140-2 VALIDATION
Since the passage of the Federal Information Security Management Act (FISMA), Federal agencies and contractors have a mandate to maintain greater control over data and information systems as a whole. U.S. Federal agencies that use cryptographic-based systems to protect sensitive information in military, medical, telecommunications, IoT applications and other IT-related products must use FIPS 140-2 validated modules to meet these security requirements. FIPS 140-2 validation is also required by national agencies in Canada and is recognized in Europe and Australia.

 

ACE is one of the smallest, fastest, and most comprehensive FIPS 140-2 validated software modules on the market for IoT applications. Specifically engineered for the critical cryptographic computing needs of IoT applications, ACE is easily used, highly portable, and uniquely configurable to operate in the toughest resource sensitive environments. With a rich software API, IoT developers can easily perform bulk encryption and decryption, message digests, digital signature creation and validation, along with key generation and exchange. ACE also includes a platform independent implementation of NSA defined Suite B cryptographic algorithms as well as other FIPS approved algorithms. The FIPS approved algorithms are listed on the NIST CAVP sites along with the final validation designation on the NIST CVMP site.

 

To further aid developers implementing IoT security, ACE is pre-integrated with the full suite of Allegro AE IoT connectivity and security toolkits including RomSTL (TLS 1.2), RomCert (SCEP and OCSP), RomSShell AE (SSH), RomPager AE (web server) and RomWebClient AE (web client).

 

IoT SECURITY AND HARDWARE CRYPTOGRAPHIC ACCELERATION
IoT applications are engineered from the ground up for resource sensitive execution environments. Typically, the primary driving factor in these applications aims to deliver the highest value IoT product at the lowest cost. Unfortunately, implementing cryptographic security protocols in any environment is resource intensive in CPU, RAM and ROM which IoT devices often find difficult to support. To help address these needs, silicon manufacturers augment their chipsets with specifically engineered cryptographic engines to off-load resource intensive cryptographic calculations. Two of Allegro’s most recent FIPS 140-2 validated ACE modules have the flexibility to utilize on-board cryptographic acceleration when available. This greatly increases throughput while reducing the demand for CPU, RAM and ROM. These validations have been configured to support the on-board cryptographic acceleration from Intel (AES-NI) in addition to hardware based entropy to meet the latest NIST Implementation Guidance for FIPS modules.

 

“The need is critical for advanced security in IoT devices,” says Bob Van Andel, President of Allegro. “With the culmination of Allegro’s latest validations, IoT developers have access to the most essential component of seven key elements needed for proactive IoT security – highly portable, reliable, FIPS 140-2 validated cryptography.” ACE is delivered as an ANSI-C source code toolkit and is available now. To learn more about the “7 Key Elements for Proactive IoT Security” visit our website: https://www.allegrosoft.com/secure-iot. For additional information on Allegro Software and the full suite of Allegro AE IoT connectivity and security toolkits, visit our website: https://www.allegrosoft.com/iot-device-cybersecurity.

 

About Allegro
Allegro Software Development Corporation is a premier provider of embedded Internet software components with an emphasis on industry-leading device management, embedded device security, UPnP-DLNA networking, and the Internet of Things. Since 1996, Allegro has been on the forefront of leading the evolution of secure device management solutions with its RomPager embedded web server and security toolkits. Also an active contributor to UPnP and DLNA initiatives, Allegro supplies a range of UPnP and DLNA toolkits that offer portability, easy integration, and full compliance with UPnP and DLNA specifications. Allegro is headquartered in Boxborough, MA.

 

Contacts:
Loren Shade
VP Marketing
Allegro Software Development Corporation
978-264-6600
loren@allegrosoft.com

 

Categories News

Allegro Software Expands ACE support with Secure Data-At-Rest Solution for IoT

by Loren Shade
April 20th, 2015

Allegro Software Expands the Allegro Cryptography Engine™ (ACE) With Support For An Advanced Data-At-Rest Solution Specifically Engineered
for the Internet of Things

FIPS 140-2 Validated Cryptography tightly integrated with a secure data-at-rest solution for Internet of Things devices

 

BOXBOROUGH, MA and SAN FRANCISCO, CA. April 20, 2015 – At the RSA® Conference 2015 in San Francisco, CA, Allegro Software, a leading supplier of Internet component software for the Internet of Things (IoT), today announced the addition of an advanced solution for securing data-at-rest using the FIPS 140-2 validated Allegro Cryptography Engine (ACE) in IoT applications. IoT devices populate the outer edge of the Internet and are often the starting point for information and trends derived from Big Data applications. When IoT devices store persistent data either locally or in the cloud, there is a risk of unintended exposure of sensitive material. Data encryption of stored data in these situations limits the risk of exposure. Allegro’s latest addition to ACE provides IoT developers with the advanced ability to easily store and retrieve data-at-rest securely from local or cloud locations. Allegro’s ACE along with the full Allegro AE™ product suite are ideally suited for creating secure IoT devices for transportation, military, energy, healthcare, and communications environments.

 

SECURING DATA AT REST IN THE INTERNET OF THINGS
Securing the Internet of Things represents many new challenges in terms of type, scale and complexity of technologies that are required. IoT devices at the edge of a network have the ability to generate large volumes of information and are often charged with securely acquiring, storing and eventually communicating data to enterprise applications. Before offloading data to cloud based applications, any sensitive information stored by IoT devices faces numerous threats and risks of unintentional exposure. Adding data encryption to the transmission process has been the traditional method for reducing this risk. However, simply encrypting data transmissions doesn’t fully address many of the threats aimed at recovering small segments of data or potentially the entire collection.

 

Allegro’s latest addition to Allegro AE and the Allegro Cryptography Engine (ACE) product suite provides IoT design engineers the ability to proactively address the threat surface created when storing sensitive data on persistent media. Rather than encrypting data at a volume or drive level where exposing a single set of keys potentially compromises a significant amount of sensitive data, Allegro’s secure data-at-rest solution encrypts information at the file level.

 

Specifically engineered for resource sensitive embedded IoT environments, Allegro’s secure data-at-rest solution uses both data encryption and authentication to detect file system validity (unauthorized modification or addition of files), limit data loss if the contents and keys of a single file are exposed, obfuscate file names and render the contents of any file useless without the application’s knowledge to prevent malicious agents from copying useful data to an external storage device. The additional capabilities of the ACE library provide integrated secure file storage and retrieval using HTTP over TLS. The library also includes application programming interfaces for independent secure file storage and retrieval. The new data-at-rest feature (like the rest of the ACE library) includes configuration parameters for tuning performance.

 

“IoT devices generate and often store data at a scale never seen before. With hundreds of millions of IoT devices deployed today and projections of billions of devices in the near future, the total potential threat for exposing sensitive data is staggering,” says Bob Van Andel, President of Allegro. “Finding ways to reduce and control this risk is vital to the continued success of IoT environments. The latest addition to the Allegro AE product suite and ACE for securely protecting data-at-rest gives development teams a greater ability to proactively control risk for their end users with FIPS 140-2 validated cryptography.”

 

The Allegro Cryptography Engine (ACE) is specifically engineered to meet the critical needs of embedded IoT computing environments and is one of the smallest, fastest, and most comprehensive FIPS 140-2 validated modules on the market. ACE enables IoT device developers to perform bulk encryption and decryption, message digests, digital signature creation and validation, and key generation and exchange. ACE includes a platform-independent implementation of the NSA-defined Suite B suite of cryptographic algorithms, as well as other FIPS-approved algorithms.

 

The full Allegro AE family of toolkits is provided as ANSI-C source code. For more information, stop by Booth #2238 South Hall at the RSA Conference or visit our website: https://www.allegrosoft.com/allegro-ae.

 

About Allegro
Allegro Software Development Corporation is a premier provider of embedded Internet software components with an emphasis on industry-leading device management, embedded device security, UPnP-DLNA networking, and the Internet of Things. Since 1996, Allegro has been on the forefront of leading the evolution of secure device management solutions with its RomPager embedded web server and security toolkits. Also an active contributor to UPnP and DLNA initiatives, Allegro supplies a range of UPnP and DLNA toolkits that offer portability, easy integration, and full compliance with UPnP and DLNA specifications. Allegro is headquartered in Boxborough, MA.

 

Contacts:
Loren Shade
VP Marketing
Allegro Software Development Corporation
978-264-6600
loren@allegrosoft.com

 

Larry LaCasse
VP Business Development
Allegro Software Development Corporation
978-264-6600
larrylc@allegrosoft.com

 

Categories News

Protecting the IoT: Thousands of cyberattacks caused by a single vulnerability

by Loren Shade
April 19th, 2015
 

Protecting the IoT: Thousands of cyberattacks caused by a single vulnerability

The Internet of Things (IoT) is an ever-growing set of applications deployed across several physical enterprise and embedded servers. Like any distributed solution, the IoT has security requirements. But what sets the IoT apart, as Ken McLaurin at Red Hat and many others agree, is its massive scale of millions of devices.

 

Data within an IoT implementation must be protected when at rest on a device or gateway and during transmission among the numerous tiers of IoT’s distributed architecture. With businesses, governments, and agencies expanding operations and systems based on IoT applications and technology, the greater the risk of hacking and multiple attacks increases substantially.

one-attack-to-a-thousand

 

Securing software on interconnected devices is just as important as protecting the physical devices themselves ⎯ perhaps even more important. Software and communication elements are often the entry point into the enterprise system where hackers can inflict maximum damage. To harden IoT applications and systems the device software, data, and the environment in which the applications operate must be protected.

 

CONTACT US DATA SHEET  

 
Categories Article

Open Source Issues in Mergers and Acquisitions

by Loren Shade
February 8th, 2015


[formcraft id=’1′]

 

Categories Whitepaper

“Misfortune Cookie” – Allegro Software Urges Manufacturers To Maintain Device Security

by Loren Shade
December 19th, 2014

Allegro Software Urges Manufacturers
To Maintain Firmware for Highest Level of Embedded Device Security

CVE-2014-9222 and CVE-2014-9223 security concerns addressed almost a decade ago

 

BOXBOROUGH, MA December 19, 2014 – Allegro Software, a leading supplier of Internet component software for embedded devices, urges manufacturers of network enabled embedded products to maintain the latest release of component software in their products. Since standards based protocols continue to evolve and new networking security concerns continue to be uncovered and addressed, using the latest version of Allegro’s software components is the way that manufacturers can be assured that their products include robust security and the highest levels of compatibility with standards.

 

An example is the case of the CVE-2014-9222 and CVE-2014-9223 vulnerabilities (also known as Misfortune Cookie). These vulnerabilities were discovered in the RomPager embedded web server version 4.07, which was released in 2002. Allegro had previously identified, fixed, and released updated software components that addressed these vulnerabilities. RomPager version 4.34, which resolved these vulnerabilities, was provided to Allegro Software customers in 2005. Allegro has continued to provide updates and enhancements to the RomPager software, and the latest available version is 5.40.

 

Unfortunately, not all manufacturers using Allegro Software products have updated their devices with the latest RomPager software component. In some cases, manufacturers continue to make and sell products with software components that are over 13 years old, which can expose products to security concerns. Allegro Software is a software component supplier to product manufacturers. Allegro Software does not have the ability to upgrade or patch our customer’s manufactured products. If you have a product that is affected by the above security concerns, please contact the product manufacturer to obtain a firmware update.

 

“MISFORTUNE COOKIE” VULNERABILITY IN VERSION 4.07 – CVE-2014-9222
In early 2002, Allegro Software released the RomPager (v4.07) embedded web server which added support for browser cookies. After the v4.07 release, Allegro identified and fixed a security issue related to the implementation of cookies with the RomPager (v4.34) release in mid 2005. Since 2005, all new and existing customers under Allegro’s software maintenance program have been provided the latest software so that they can update their products and resolve this security concern.

 

DIGEST BUFFER OVERFLOW VULNERABILITY IN VERSION 4.07 – CVE-2014-9223
RomPager Version 4.07 also included a Digest Authentication buffer overflow vulnerability. This security issue was also identified and addressed in the RomPager 4.34 software release.

 

ONGOING DEVELOPMENT
Since version 4.34, Allegro Software has continued to invest in embedded device security with ongoing development of our existing products and creation of new products aimed at secure Internet connectivity. These investments have included the creation of the Allegro Cryptography Engine (ACE), which has received FIPS 140-2 validation (http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2013.htm#2048). Allegro’s suite of Advanced Edition toolkits with IPv4/IPv6 capabilities have been fully integrated with ACE and is targeted at next-generation embedded systems connectivity with advanced security requirements. “For over 18 years, Allegro has focused on delivering highly reliable software components for embedded systems found in consumer electronics, medical devices, industrial-control applications, military applications and more.” says Bob Van Andel, President of Allegro. “We take embedded device security seriously and want our customer partners to do the same. We strongly urge manufacturers to maintain their firmware with the latest software components to deliver the highest level of Internet communications compatibility and embedded device security to the end customer.”

 

About Allegro
Allegro Software Development Corporation is a premier provider of embedded Internet software components with an emphasis on industry-leading device management, embedded device security, UPnP-DLNA networking, and the Internet of Things. Since 1996, Allegro has been on the forefront of leading the evolution of secure device management solutions with its RomPager embedded web server and security toolkits. Also an active contributor to UPnP and DLNA initiatives, Allegro supplies a range of UPnP and DLNA toolkits that offer portability, easy integration, and full compliance with UPnP and DLNA specifications. Allegro is headquartered in Boxborough, MA.

 
 

Contacts:
Loren Shade
VP Marketing
Allegro Software Development Corporation
978-264-6600
loren@allegrosoft.com

 

Larry LaCasse
VP Business Development
Allegro Software Development Corporation
978-264-6600
larrylc@allegrosoft.com

 

Categories News

Allegro Software Announces Support for DLNA’s VidiPath™ Interoperability Guidelines

by Loren Shade
September 12th, 2014

Allegro Software Announces Support for DLNA’s
VidiPath™ Interoperability Guidelines

Interoperability toolkits to enable consumer choice for subscription TV services

 

BOXBOROUGH, MA September 12, 2014 – Today Allegro Software, the leading supplier of Internet component software for embedded devices, announces support for VidiPath, the latest expansion of DLNA® interoperability guidelines for connected Consumer Electronics (CE) devices. Driven by consumer demand for multi-device viewing experiences, demand from service providers to easily support multi-device viewing of subscription TV, while preserving the user experience, and demand from CE manufacturers to simplify building and supporting of these devices, the VidiPath interoperability guidelines expand support for the evolving ecosystem of the connected home. With the growing marketplace of networked devices supported by UPnP® / DLNA standards-based connectivity, innovative CE manufacturers and service providers can now deliver unparalleled viewing experiences across a myriad number of consumer devices. As the leader in embedded Internet connectivity and long-time contributor to both the UPnP and DLNA communities, Allegro announces RomPlug VP, a family of networking software components that provide OEM developers with a rich framework of UPnP / DLNA technologies to build DLNA VidiPath devices with ease. Founded in 1994, Allegro offers field-proven networking software shipping in 175+ million devices worldwide. Leading global manufacturers of consumer electronics, telecommunications equipment, medical equipment, automotive, and aircraft rely on Allegro technology to deliver advanced and robust networking connectivity every minute of every day.

 

The Consumer Need for VidiPath Connectivity
According to ABI Research, over 1 billion global pay TV subscribers will generate service revenue in excess of $229 billion by 2018 [1]. Such strong revenue predictions are fueled by consumer interest in the multi-device viewing experience, where content can be viewed anywhere a user has a connected consumer device. Prior to the announcement of DLNA’s VidiPath standards-based interoperability guidelines, the full benefits of multi-device viewing were elusive. User experiences were riddled with downloading and installing proprietary apps designed for particular devices and manufacturers in order to discover and access desired content. Frequently, only a portion of the total subscription TV content could be enjoyed. Meanwhile, service providers looking to deliver multi-screen environments lacked a cost-effective and efficient solution, without requiring additional premise equipment or managing various software applications across a breadth of consumer platforms (e.g., TVs running Android-, iOS-, or Windows-based phones and tablets). In order to resolve these issues, service providers started work with DLNA on an in-home, content-streaming solution that benefited all involved ⎯ consumers, service providers, and CE manufacturers. The goal was to offer a high-quality subscription experience to any consumer using his own device over the home network. DLNA’s latest connected consumer device interoperability guidelines, VidiPath, are the result of this effort. Developed through a close collaboration among subscription TV service providers, device manufacturers, and the large product development ecosystem, VidiPath represents thousands of hours of discussion, planning, development, and integration testing that deliver an unprecedented, seamless user experience for multi-device viewing.

 

Allegro’s RomPlug VPdlnatechnologycomponent
A long-time supporter of and contributor to both the UPnP and DLNA communities, the RomPlug VP Toolkit extends Allegro’s support for VidiPath, the latest DLNA interoperability standard. The RomPlug VP suite of software toolkits provides OEM developers with a rich framework to support the underlying requirements of VidiPath, such as:

  • DTCP-IP for Protected Streaming
  • HTML5 / RUI for Distributed User Experience
  • UPnP Energy Management for Sleep Mode Support
  • DASH for Adaptive Delivery
  • Client Authentication Technology
  • Transport and Link Layer Diagnostics Technology

 

Allegro is an industry leading DLNA Technology Component supplier and works with consumer electronics companies worldwide to incorporate DLNA interoperability in more than 50 shipping DLNA Certified product families. Allegro’s RomPlug suite of UPnP / DLNA software components offers OEM engineering teams flexible and robust solutions to create UPnP / DLNA-enabled consumer electronics and mobile devices. “With demand for subscription TV services rising, DLNA’s latest interoperability guidelines provide clear benefits for consumers, CE manufacturers, and service providers alike” says Bob Van Andel, CEO and President of Allegro. “Allegro’s RomPlug VP component continues our commitment to the evolving ecosystem of connected consumer devices by offering the latest in CE connectivity and device management for OEM manufacturers to create devices with an excellent user experience.”

 

The RomPlug software components are provided as ANSI-C source code and are available now. For more information, visit our website: https://www.allegrosoft.com/vidipath.

 

About Allegro
Allegro Software Development Corporation is the premier provider of UPnP networking and device management technologies specifically targeted at embedded Internet applications. Since 1996, Allegro has been a force in the evolution of device management solutions with its RomPager embedded web server toolkit. Now also an active contributor to UPnP / DLNA initiatives, Allegro supplies a range of UPnP toolkits that offer portability, easy integration and full compliance with UPnP device specifications. Allegro is headquartered in Boxborough, MA.

 
 

Contacts:
Loren Shade
VP Marketing
Allegro Software Development Corporation
978-264-6600
loren@allegrosoft.com

 

Larry LaCasse
VP Business Development
Allegro Software Development Corporation
978-264-6600
larrylc@allegrosoft.com

 

Categories News

Allegro Software Announces Advanced Edition Embedded Internet Software Toolkits

by Loren Shade
February 24th, 2014

Allegro Software Announces Advanced Edition
Embedded Internet Software Toolkits That Empower Next-Generation
Embedded Systems Connectivity and Security

IPv6-Enabled Web Technology and FIPS 140-2 Cryptography for Embedded Systems

 

BOXBOROUGH, MA and SAN FRANCISCO, CA. February 24, 2014 – At the RSA® Conference 2014 in San Francisco, CA, Allegro Software, a leading supplier of Internet component software for embedded devices, today announced the Allegro Advanced Edition (AE) product suite targeting next-generation embedded systems connectivity and advanced security. Specifically engineered for the rigors of embedded computing, the Allegro AE product suite offers both IPv4 and IPv6 operation, allowing OEM manufacturers to build secure embedded device management architectures that perform seamlessly in IPv4 and IPV6 networking environments alike. The Allegro AE family of components is pre-integrated with the Allegro Cryptography Engine (ACE™) FIPS 140-2 level 2 validated cryptography module, enabling manufacturers to add standards-based cryptography to resource-sensitive embedded systems quickly, easily, and reliably while decreasing time to market. The full Allegro AE product suite is ideally suited for creating secure device management architectures in transportation, military, energy, healthcare, and communications applications where IPv6 operation and strong validated cryptography is a requirement.

 

CONNECTIVITY
Long recognized as a “growing issue” with the Internet, the allocation of IPv4 addresses has reached a tipping point. Regional Internet Registries (RIRs) manage the allocation and registration of Internet addresses throughout the five defined regions in the world. The Asia Pacific, Europe, and Middle East regions have exhausted their IP addresses, with the other regions of the world soon to follow. The global growth, acceptance, and use of connected devices are fueling the depletion of the few remaining address blocks in the limited pool of 4.3 billion IPv4 addresses.

 

IPv6 promises an almost unlimited address space in addition to many other global networking enhancements. For most large organizations, ISPs, and consumers, however, transitioning to IPv6 is more than simply flipping a switch. As a result, most networking environments will operate in both IPv4 and IPv6 environments for the foreseeable future before transitioning to a dedicated IPv6 network.

 

Allegro’s suite of Advanced Edition embedded Internet toolkits provide IPv6 and IPv4 operating modes, enabling OEM manufacturers to leverage the broad range of Web technology, functionality, and flexibility of the Allegro AE product suite to create innovative secure device management architectures in IPv4 environments today that will also work in IPv6 environments of the future.

 

SECURITY
Network-enabled embedded systems are sometimes referred to as the “quiet contributors” of the Internet of Everything. Anonymously working behind the scenes for many modern technologies ⎯ from fire trucks and automobiles, consumer healthcare products and medical devices to defense and energy management products and services ⎯ Internet-enabled embedded devices play the integral role of delivering connectivity into the hands of everyone. For the billions of connected devices in today’s marketplace, this presents significant new security challenges that must be addressed immediately and systematically.

 

For enterprise and embedded systems, the systematic implementation of standards-based encryption technology has proven invaluable in addressing security concerns. Many industries have a heightened awareness about the vulnerabilities that embedded systems face against the countless types of Internet attacks, and insist upon the effective utilization of cryptography to mitigate the risk of data theft. The Allegro Cryptography Engine (ACE) is one of the smallest, fastest, and most comprehensive FIPS 140-2 validated cryptography software modules on the market. Specifically engineered to meet the critical needs of embedded computing systems, ACE enables embedded systems developers to perform bulk encryption and decryption, message digests, digital signature creation and validation, and key generation and exchange easily. ACE includes a platform-independent implementation of the NSA-defined Suite B suite of cryptographic algorithms, as well as other FIPS-approved algorithms.

 

“As the Internet of Everything continues to grow, the need to smoothly transition to the next generation Internet Protocol (IPv6) is approaching rapidly,” says Bob Van Andel, President of Allegro. “Allegro’s Advanced Edition products allow engineering design teams to implement device-management architectures using IPv4 today that smoothly transition to the next-generation IPv6 in the near future. In addition, the Allegro AE suite of toolkits address the need for strong data privacy with advanced encryption and security technology for your embedded devices.”

 

The available Allegro AE suite of toolkits are:

 

Name

Description

RomPager AE

Embedded Web Server

RomWebClient AE

Embedded Web Client

RomSTL

Embedded TLS/DTLS/SSL

RomXML AE

Embedded XML

RomXOAP AE

Embedded SOAP

RomCert

Embedded X.509 Certificate Management

RomRadius

Embedded RADIUS Client

RomCLI AE

Embedded Command Line Interface

RomSShell AE

Embedded SSH

ACE

Allegro Cryptography Engine – FIPS 140-2 Level 2 and Suite B

 

The Allegro AE family of toolkits is provided as ANSI-C source code toolkits and is available now. For more information, stop by Booth #233 South Hall at the RSA Conference or visit our website: https://www.allegrosoft.com/allegro-ae.

 

About Allegro
Allegro Software Development Corporation is the premier provider of UPnP networking and device management technologies specifically targeted at embedded Internet applications. Since 1996, Allegro has been a force in the evolution of device management solutions with its RomPager embedded web server toolkit. Now also an active contributor to UPnP / DLNA initiatives, Allegro supplies a range of UPnP toolkits that offer portability, easy integration and full compliance with UPnP device specifications. Allegro is headquartered in Boxborough, MA.

 
 

Contacts:
Loren Shade
VP Marketing
Allegro Software Development Corporation
978-264-6600
loren@allegrosoft.com

 

Larry LaCasse
VP Business Development
Allegro Software Development Corporation
978-264-6600
larrylc@allegrosoft.com

 

Categories News

Allegro Software Announces FIPS Embedded Device Security

by Loren Shade
December 16th, 2013

Allegro Software Announces FIPS Embedded Device Security

FIPS Validated Cryptography Library for Embedded Systems

 

BOXBOROUGH, MA – December 16, 2013 – Allegro Software Development Corporation, a leading supplier of Internet component software for embedded devices, today announced that it has earned FIPS 140-2 level 2 validation for the Allegro Cryptography Engine, ACE™. Specifically engineered for the rigors of embedded computing, ACE enables manufacturers to add standards-based cryptography to resource sensitive embedded systems quickly, easily and reliably while decreasing time to market. ACE is ideally suited for use in embedded transportation, military, energy, healthcare and communications applications where strong validated cryptography is a requirement.

 

FIPS 140-2
Early embedded systems were unprepared to address the new security implications of network connectivity. Many industries now have a heightened awareness that embedded systems and larger enterprise systems that include embedded devices are vulnerable to a whole new realm of Internet attacks. The National Institute of Standards and Technology (NIST) has taken steps to ensure security and compatibility between communicating computers by defining Federal Information Processing Standards (FIPS). They specifically identified a set of guidelines (FIPS 140-2) for cryptographic-based security systems to protect sensitive information in computer and telecommunication systems, whether desktop or embedded, and asserted the requirement that vendors must comply to these standards to sell and support the government or its contractors. The application and testing process to earn FIPS 140-2 validation is rigorous and non-trivial, but for companies selling security products to the federal government, their contractors or allies overseas, formal FIPS validations are a prerequisite to eligibility for government contracts.

 

ACE and FIPS 140-2 Validation
The 140-2 FIPS (Federal Information Processing Standards) are used to accredit cryptographic “modules” that drive secure software or hardware implementations, and most federal agencies and contractors working on sensitive government projects are prohibited from buying products containing security software that is not officially FIPS-validated. Allegro applied for and received FIPS 140-2 level 2 validation for the Allegro Cryptography Engine. ACE is one of the smallest, fastest, and most comprehensive FIPS 140-2 validated software modules on the market. ACE was specifically engineered to meet the critical needs of embedded computing systems and purposely designed to meet the requirements for FIPS 140-2 validation. With a common software interface, embedded systems developers can easily perform bulk encryption and decryption, message digests, digital signature creation and validation, and key generation and exchange. ACE additionally includes a platform independent implementation of the NSA defined Suite B suite of cryptographic algorithms, as well as other FIPS approved algorithms. The FIPS approved cryptographic algorithms included in ACE have been validated and are listed on the NIST CAVP sites along with the final validation designation on the NIST CVMP site.

 

“Data privacy is a significant issue for the billions of network-enabled embedded systems that inhabit the Internet” says Bob Van Andel, President of Allegro. “Allegro’s ACE toolkit significantly reduces risk, development effort, integration and testing time while giving our customers FIPS-validated security solutions engineered for use in embedded systems.” ACE is delivered as an ANSI-C source code toolkit and is available now. For additional information on ACE, visit our website: www.allegrosoft.com/ace

 

Reference
NIST CAVP Sites:
 

http://csrc.nist.gov/groups/STM/cavp/documents/aes/aesval.html

http://csrc.nist.gov/groups/STM/cavp/documents/drbg/drbgval.html

http://csrc.nist.gov/groups/STM/cavp/documents/dss/ecdsanewval.html
 

NIST CVMP Site:
 

http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm

 

About Allegro
Allegro Software Development Corporation is the premier provider of UPnP networking and device management technologies specifically targeted at embedded Internet applications. Since 1996, Allegro has been a force in the evolution of device management solutions with its RomPager embedded web server toolkit. Now also an active contributor to UPnP / DLNA initiatives, Allegro supplies a range of UPnP toolkits that offer portability, easy integration and full compliance with UPnP device specifications. Allegro is headquartered in Boxborough, MA.

 
 

Contacts:
Loren Shade
VP Marketing
Allegro Software Development Corporation
978-264-6600
loren@allegrosoft.com

 

Larry LaCasse
VP Business Development
Allegro Software Development Corporation
978-264-6600
larrylc@allegrosoft.com

 

Categories News

Allegro Software Development Corporation and A10 Networks Reach Licensing Agreement

by Loren Shade
June 14th, 2013

Allegro Software Development Corporation and A10 Networks, Inc. Reach Licensing Agreement

 

BOXBOROUGH, MA – June 7, 2013 – Allegro Software Development Corporation (“Allegro”) and A10 Networks, Inc. (“A10”) are pleased to announce that they have entered into a licensing agreement for the use of Allegro’s technology in A10’s products. All legal disputes between Allegro and A10 are resolved, allowing both parties to move forward to focus on growing their businesses and continue their commitment to providing customers with the highest quality products and services.

 

About Allegro
Allegro Software Development Corporation is the premier provider of UPnP networking and device management technologies specifically targeted at embedded Internet applications. Since 1996, Allegro has been a force in the evolution of device management solutions with its RomPager embedded web server toolkit. Now also an active contributor to UPnP / DLNA initiatives, Allegro supplies a range of UPnP toolkits that offer portability, easy integration and full compliance with UPnP device specifications. Allegro is headquartered in Boxborough, MA. For more information, visit: https://www.allegrosoft.com.

 

About A10 Networks
A10 Networks was founded in Q4 2004 with a mission to provide innovative networking and security solutions. A10 Networks makes high-performance products that help organizations accelerate, optimize and secure their applications. A10 Networks is headquartered in Silicon Valley with offices in the United States, United Kingdom, France, The Netherlands, Germany, Spain, Brazil, Japan, China, Korea, Taiwan, Hong Kong, Singapore and Malaysia. For more information, visit: http://www.a10networks.com.

Categories News
Next Page »

Home | Resources | News/Events | Company | Contact | Legal

Copyright © 2018, Allegro Software Development Corporation, All Rights Reserved