PRODUCTS
wolfEngine wolfCrypt FIPS engine for OpenSSL
wolfEngine is an OpenSSL engine backed by wolfSSL's wolfCrypt cryptography library. wolfCrypt is FIPS-validated, so wolfEngine can be used to achieve FIPS compliance with OpenSSL, all without having to touch the OpenSSL code itself. wolfEngine is structured as a standalone library which links against wolfSSL (libwolfssl) and OpenSSL.
wolfEngine implements and exposes an OpenSSL engine implementation which wraps the wolfCrypt native API internally. Algorithm support matches that as listed on the wolfCrypt FIPS 140-2 certificate #3389.
Get the latest open source GPLv3 version now!
Version: 1.4.1
Release Date: 08/27/2026
View ChangeLog
Highlights
- Initialization modes
- Dynamic engine loading
- Static entry point
- OpenSSL configuration file
- OpenSSL tested versions
- 1.0.2h
- 1.1.1b
Applications that have been successfully compiled using wolfEngine include OpenSSL Unit Tests, NGINX, cURL, Stunnel, OpenSSH, and many more.
OpenSSL Version Support
Initialization modes can be used with any OpenSSL version that supports the engine framework. Engines are deprecated in OpenSSL 3.0.0. They're replaced with a similar concept called providers. wolfSSL also offers a provider backed by wolfCrypt. Please reach out to facts@wolfssl.com if you're interested in evaluating the wolfSSL provider.
Supported Chipmakers
- wolfEngine has support for chipsets including ARM, Intel, Motorola, mbed, NXP/Freescale, Microchip/Atmel, STMicroelectronics, Analog Devices, Texas Instruments, Xilinx SoCs/FPGAs, Renesas, Espressif and more.
- If you would like to use or test wolfEngine on another
chipset or environment, let us know and we’ll be happy
to support you.
Supported Operating Environments
- Win32/64, Linux, Mac OS X, Solaris, ThreadX, VxWorks, FreeBSD, NetBSD, OpenBSD, embedded Linux, Yocto Linux, OpenEmbedded, WinCE, Haiku, OpenWRT, iPhone (iOS), Android, Nintendo Wii and Gamecube through DevKitPro, QNX, MontaVista, NonStop, TRON/ITRON/µITRON, Micrium µC/OS-III, FreeRTOS, SafeRTOS, NXP/Freescale MQX, Nucleus, TinyOS, HP/UX, AIX, ARC MQX, TI-RTOS, uTasker, embOS, INtime, Mbed, uT-
Kernel, RIOT, CMSIS-RTOS, FROSTED, Green Hills INTEGRITY, Keil RTX, TOPPERS, PetaLinux, Apache Mynewt, PikeOS, Deos, Azure Sphere OS - If you would like to test wolfSSL on another environment, let us know and we’ll be happy to support you.
Features
- Multiple Hash Functions:
- SHA-1, SHA-2 (SHA-224, SHA-256, SHA-384, SHA-512), SHA3 (SHA3-224, SHA3-256, SHA3-384, SHA3-512)
- Block, Stream, and Authenticated Ciphers:
- AES (128, 192, 256, ECB, CBC, CTR, GCM, CCM), CMAC
-
Deterministic Random Bit Generator (DRBG)
-
Public Key Algorithms:
- RSA, DH
- ECC:
-
ECDSA, ECDH, Curve (P-192, P-224, P-256, P-384, P-521)
-
- Key Derivation:
- HMAC, PBKDF2, HKDF
- RSA and ECC Key Generation
- TLS PRF
- SHA-3 support available with OpenSSL versions 1.1.1+.
- EC_KEY_METHOD available with OpenSSL versions 1.1.1+.
- OpenSSL compatibility layer

