wolfSSL provides a robust and secure DTLS 1.2 implementation. During the handshake process, wolfSSL will re-send its previous flight of messages in the following circumstances: a network timeout has occurred waiting on data to arrive for processing the last message of the peer’s current flight has been received out of order a duplicate of the […]
Read MoreMore TagMonth: March 2021
Introducing wolfSentry – An Embedded IDPS
wolfSSL has a major new product in development — wolfSentry, the universal, dynamic, embedded IDPS (intrusion detection and prevention system). At a high level, wolfSentry is a dynamically configurable logic hub, arbitrarily associating user-defined events with user-defined actions, contextualized by connection attributes, tracking the evolution of the client-server relationship. At a low level, wolfSentry is […]
Read MoreMore TagRFC 5705: Keying Material Exporters for TLS
With the release of wolfSSL 4.7.0, we now support Keying Material Exporters for TLS as defined in RFC 5705! This new functionality allows applications to establish common secrets using the underlying (D)TLS connection. A popular project that makes use of exported keying material is OpenVPN (which wolfSSL supports!). It uses the user provided label, in […]
Read MoreMore TagwolfSSL, Session Tickets, TLS 1.3 and TLS 1.2
At wolfSSL we have found more and more customers choosing to use TLS 1.3. That’s great! More businesses are taking advantage of the improved security in the new protocol. These customers are finding that they need to use session tickets for resumption for the first time in their applications. In the latest release of wolfSSL, […]
Read MoreMore TagDo you need to secure your ARINC 664 transmissions?
Did you know that wolfSSL is transport agnostic, and can run on bare metal? Did you know that we have DO-178 artifacts for our software? Are you aware of MITM attacks or spoofing attacks that could compromise your network? Let us know if you need help with security for your ARINC 664 transmissions. We can […]
Read MoreMore TagIntroducing wolfSentry
wolfSSL has a major new product in development — wolfSentry, the universal, dynamic, embeddable IDPS (intrusion detection and prevention system). At a high level, wolfSentry is a dynamically configurable logic hub, arbitrarily associating user-defined events with user-defined actions, contextualized by connection attributes, tracking the evolution of the client-server relationship. At a low level, wolfSentry is […]
Read MoreMore TagAre you using an Off Brand TLS?
It is not always easy to tell if your TLS vendor is legitimate. They might have great slide decks, a list of supported ciphers, and a smooth talking salesperson, but do they have what it takes to keep you secure? Here’s how you tell: Ask them if they do fuzz testing. If you get a […]
Read MoreMore TagI-CUBE-WOLFSSL is MadeForSTM32 Certified
wolfSSL software expansion package for STM32Cube is among the first to be MadeForSTM32 certified with V2 label! Having gone through the evaluation process, we’re pleased to announce that I-CUBE-WOLFSSL V4.6.0 is granted MadeForSTM32 V2, a new quality label introduced by STMicroelectronics for the STM32 microcontrollers ecosystem. wolfSSL offers support for STM32Cube Expansion Package enhanced […]
Read MoreMore TagXilinx “Zynq UltraScale+ MPSoC’s” Benchmarking with wolfSSL
Benchmark values of the wolfSSL embedded SSL/TLS library running on Xilinx boards, including the ZCU102, have been collected and are up for viewing. Our friends over at Xilinx have a white paper posted that goes into detail about the benchmark values here: https://www.xilinx.com/support/documentation/white_papers/wp512-accel-crypto.pdf. This shows how much faster applications can perform secure operations when incorporating the hardware acceleration […]
Read MoreMore TagEmbedded Bootloader with hardware acceleration and cryptography
Most bootloaders do not use hardware acceleration and cryptography. wolfSSL’s wolfBoot is an exception. wolfBoot can use Secure Elements, such as ATECC508A. Thanks to integration with wolfTPM, wolfBoot can also leverage TPM 2.0, such as STMicroelectronics ST33, Infineon SLB9670, Nuvoton NPC750 and other TPM modules. Thanks to wolfSSL’s cryptographic engine, wolfBoot can take advantage of […]
Read MoreMore Tag