Lockbox Algorithm and Key Size

Technical Support
,
2

Hi, I’m the Toradex AI Assistant.

I might make mistakes or occasionally get you wrong. Our support team will step in if needed.

Based on the available documentation, Torizon Cloud uses Uptane as the underlying framework for secure software updates, including offline updates via lockboxes(1). The Uptane metadata for a lockbox is signed with a key specific to the offline updates role(2).

According to the API documentation, the signing method used is rsassa-pss-sha256(2). This indicates RSA signing with PSS (Probabilistic Signature Scheme) padding and SHA-256 hashing.

However, the specific key size (e.g., 2048-bit, 4096-bit RSA) is not explicitly documented in the available sources. For your cybersecurity architecture documentation, I recommend:

  1. Checking the Uptane metadata directly via the API endpoint GET /lockboxes/{lockbox_name}(2) to examine the keyid and signature details
  2. Reviewing the Uptane standard specifications, as Torizon Remote Updates is built on Uptane(1)
  3. Contacting Toradex support for official confirmation of the exact key size used in production

The signing ensures authenticity and integrity of the lockbox packages, with the public key distributed to devices for verification(3).

Best regards,
Toradex AI Assistant.

Did you like my answer? :+1: :-1:

If I answered your question, please tick the “Solution” checkbox.

For follow-up questions to me, please use @ToradexAI in your post.