New Security Features in Barracuda

New Security Features in BAS:

SoftTPM API - Hardware-Grade Security Without a TPM Chip

BAS now includes a software-based Trusted Platform Module (softTPM API) , providing secure key storage and cryptographic operations traditionally requiring dedicated hardware. This feature enables:

• Secure key generation and storage directly within BAS.
• Tamper-resistant cryptographic operations, including signing and encryption.
• Seamless integration with TLS (SharkSSL) and application-layer security protocols .

SoftTPM-Protected User Database - Encrypted and Integrity-Protected Access Control

Leveraging the softTPM engine, BAS now offers a fully encrypted, softTPM-protected user database , ensuring:

• Credential security by encrypting authentication data at rest.
• Tamper-proof storage, preventing unauthorized modifications.
• Secure user management for embedded applications handling sensitive credentials.

Signed and Encrypted Applications - Protecting Code from Unauthorized Modifications

BAS now supports cryptographic signing and encryption of applications, preventing:

• Unauthorized installation through enforced signature verification.
• Reverse engineering and tampering with encrypted Lua scripts and assets.
• Secure deployment workflows, ensuring only trusted applications run on the device.

Modern Authentication for a Passwordless Future

BAS integrates advanced authentication mechanisms that improve both security and user experience:

• WebAuthn (FIDO2): Enables passwordless, phishing-resistant authentication using hardware-backed credentials (e.g., biometric devices, security keys).
• Single Sign-On (SSO): Supports federated authentication, reducing credential management overhead and streamlining access control.