Hello @Mathea90, i have exactly the same issue. Do you find something to fix this issue?

@yveaux said in Gateway with signing = low memory:

#define MY_RX_MESSAGE_BUFFER_SIZE (10)

thank you @Yveaux et @mfalkvidd

I had the same result but when i add the two lines:

#define MY_RX_MESSAGE_BUFFER_FEATURE
#define MY_RF24_IRQ_PIN (2)

i have

Sketch uses 16296 bytes (50%) of program storage space. Maximum is 32256 bytes.
Global variables use 1693 bytes (82%) of dynamic memory, leaving 355 bytes for local variables. Maximum is 2048 bytes.
Low memory available, stability problems may occur.

A gateway without MY_RX_MESSAGE_BUFFER_FEATURE defined, can be problematic non ?

@mfalkvidd
So my only solution is to use an arduino with more memory ? do you have an exemple of arduino board i can use ?

@mfalkvidd said in Gateway with signing = low memory:

@snyfir use hardware signing or use an Arduino with more memory.

MY_SIGNING_ATSHA204 is not hardware signing ? i have connected an ATSHA204 to the arduino pin.

Hi,
I use MySensors V2.3.1 in an arduino nano has gateway.
my code is

#define MY_RADIO_RF24
#define MY_GATEWAY_SERIAL
#define MY_SIGNING_ATSHA204

#include <MySensors.h>

void setup()
{
}

void presentation()
{
}

void loop()
{
	delay(10);
}

but when i upload with arduino IDE i have a warning message: "Low memory available, stability problems may occur"

how can i solve this issue ?

thank you for your help

@anticimex said in Send secured command to the gateway:

@snyfir It might work, but watch out so that you do ensure that nobody can spoof the device ID or somehow trick your GW to reassign the ID to a level where it will not verify the message.

if in the controller i verify the couple message / id of the node, it will be ok no ?
it's possible to trick the GW to reassign the ID ?

Thank you @anticimex i will do that

Maybe a proper way to avoid resetting EEPROM GW i can change the line https://github.com/mysensors/MySensors/blob/master/core/MySigning.cpp#L277 :
from

if (msg.destination == getNodeId()) {

to

if (msg.destination == getNodeId() && msg.sender >= 100) {

in that way i don't nead to use MY_SIGNING_WEAK_SECURITY to "downgrade" security and if i nead a node transmission from node to gateway to be secure i just assign it an id > 100

what do you think ?

Thank you for your answer @Anticimex

@anticimex said in Send secured command to the gateway:

Or more to the point: the GW will allow a node to set the bit in gw eeprom to indicate that it require the node to send signed messages, but it will never clear it.
The consequence of doing this is that if you at some point want to disable requirement for signatures for a node, you have to manually reset the eeprom flag in the GW.

That exactly what i want to do. But it seams not implemented like this in MySensors V2.3.1
Do you have an idea how to hack MySensors V2.3.1 to do this ?

Hi,

i build a keypad node which send a message to the gateway to activate or deactivate the alarm. To avoid somebody to send the message whithout the keypad device i use signing message described here : https://www.mysensors.org/apidocs-beta/group__MySigninggrpPub.html

in the keypad node i have:

#define MY_SIGNING_ATSHA204
#define MY_SIGNING_REQUEST_SIGNATURES

and in the gateway i have:

#define MY_SIGNING_ATSHA204

but if i understand well, only messages send from gateway to keypad node are signed. If i want signed messages send from keypad node to gateway i nead to put in the gateway:

#define MY_SIGNING_ATSHA204
#define MY_SIGNING_REQUEST_SIGNATURES

but when i do that all my nodes nead to sign here message but i want only the keypad node. I can used MY_SIGNING_WEAK_SECURITY but if the keypad node send non signed message, the message will be taking. and the security from my keypad node and the gateway is compromised.

How can i force the gateway to accept only signed message from keypad node but accept non signed message from other node ?

thank you for your help