The TLS v1.3 specification has been evolving over the year and is close to being finalized. Recently the code changes required to support Draft 21 were added to wolfSSL.Most browsers and servers on the Internet are stuck on Draft 18. This maximizes interoperability and allows for collection of error rate statistics. wolfSSL is able to […]
Read MoreMore TagAuthor: wolfSSL
Overview of Testing in wolfSSL
The security of wolfSSL products is always on our mind and holds high importance. Conducting regular, diligent, and well-planned testing helps maintain wolfSSL’s robustness and security. We strive to write and maintain clean, readable, and understandable code. Like the halting problem, we know it is impossible to test every single possible path through the software, but […]
Read MoreMore TagwolfSSL Test and Benchmark Applications in Non-Standard Environment
Recently the question of building the wolfCrypt test and benchmark applications in a non-standard environment has been asked multiple times to our support team. We wanted to provide a solution for those who might be struggling! The wolfSSL embedded SSL/TLS library ships with both of these applications to help users get up and running on […]
Read MoreMore TagwolfSSL Intel SGX Support and Testing
Providing Secure, Well-Tested SGX Integration with wolfSSL and wolfCrypt Did you know that wolfSSL has support for Intel SGX? Not only do we have support for SGX, but we do continuous integration testing on that support to offer our users a more robust and mature solution. This means that every night a process starts up […]
Read MoreMore TagUsing Alternative I/O with wolfSSL Lightweight TLS
In this past (here and here) we have written about wolfSSL’s I/O abstraction layer and support for alternative I/O mediums. We wanted to refresh our reader’s memory about this helpful feature. In this context, “less traditional I/O” means running SSL/TLS over something besides TCP/IP or UDP – for example Bluetooth, a serial connection, memory buffers, […]
Read MoreMore TagSecuring MySQL (#mysql) with wolfSSL
MySQL (#mysql) currently comes bundled with yaSSL to provide an option for SSL/TLS connections when using a database. A patch for securing MySQL with the wolfSSL embedded TLS/SSL library is available for MySQL version 8.0.0 here https://github.com/wolfSSL/mysql-patch. Along with an increased level of security comes the potential to use […]
Read MoreMore TagwolfSSH v1.2.0 SSH Server Now Available
wolfSSH v1.2.0 has dropped! We have just added support for Elliptic Curve algorithms and AES-GCM. The following key exchange and public key algorithms are now available: ecdh-sha2-nistp256 ecdh-sha2-nistp384 ecdh-sha2-nistp521 ecdsa-sha2-nistp256 ecdsa-sha2-nistp384 ecdsa-sha2-nistp521 The wolfSSH SSH server provides the encryption algorithm “aes128-gcm@openssh.com”, which is an implementation of RFC 5647 using the MAC algorithm implied with using […]
Read MoreMore TagSecuring SMTP with wolfSSL using STARTTLS
STARTTLS is a way of protecting email communications from malicious users (insiders or otherwise) by upgrading a plaintext SMTP connection to one secured by SSL/TLS. SMTP using STARTTLS allows encryption of emails in transit between email clients and servers. Without encryption email messages can easily be intercepted and read at any point between the sender […]
Read MoreMore TagFuzz Testing Research, Keeping up with the Times
A recent paper titled “Exploiting Dissent: Towards Fuzzing-based Differential Black-Box Testing of TLS Implementations” was published by Axel Sikora and Andreas Walz. wolfSSL found the paper both well composed and informative. We would like to congratulate Andreas and Axel on a well composed piece of literature and we would highly recommend reading it if you […]
Read MoreMore TagTLS-Attacker, making the online world a safer place!
wolfSSL has a goal: “wolfSSL will provide the best security in the world for all to benefit”! We are very passionate about keeping our users safe and secure in an increasingly connected online world. To that end the wolfSSL product is the most thoroughly tested cryptography and TLS solution on the market today. wolfSSL appreciates […]
Read MoreMore Tag