Hi! The CyaSSL Embedded SSL engine, wolfCrypt cryptography library, and the wolfSSL Embedded Web Server now support Freescale`s ColdFire hardware encryption. Our initial benchmarks show that AES and 3DES cryptography operations are up to 10 times faster when done with ColdFire`s hardware acceleration. If you would like to use one of our products with ColdFire, […]
Read MoreMore TagAuthor: wolfSSL
SSL/TLS Programming Tutorial
Are you just learning about SSL/TLS, or interested in learning how to layer it into an existing application? If so, we include an SSL tutorial in Chapter 11 of our wolfSSL Manual which provides a good introduction to integrating wolfSSL into a typical TCP socket-based application. Our SSL/TLS Tutorial uses base examples found in the […]
Read MoreMore TagSerpent Cipher in wolfSSL Embedded SSL
Hi! One of the alternative ciphers we`ve considered implementing in wolfSSL is the Serpent Cipher. Not only does it have a cool sounding alliterative name, but it is theoretically more secure than Rijndael/AES. In fact, it was a finalist for AES. An overview of the Serpent Cipher can be found here: http://en.wikipedia.org/wiki/Serpent_(cipher). If you think […]
Read MoreMore TagwolfSSL does _not_ implement Dual_EC_DRBG
Hi! It is rare for a cryptography algorithm to make the pages of the popular press, but Dual_EC_DRBG has done just that! The best article we`ve seen to date is Kim Zetter`s lucid article in Wired: https://www.wired.com/2013/09/nsa-backdoor/. For the record, we have never implemented the Dual_EC_DRBG algorithm, nor gone so far as to set it […]
Read MoreMore TagImplementation and Performance of AES-NI in wolfSSL Lightweight SSL
Do you have a processor and compiler which support Intel’s AES-NI? If so, you can take advantage of the increase in performance provided by AES-NI in CyaSSL and wolfCrypt. wolfSSL has worked with Intel to publish a white paper describing how Intel’s AES-NI can be used with the CyaSSL embedded SSL library. This paper provides […]
Read MoreMore TagwolfSSL STM32 Hardware Crypto and RNG Support
Did you know that the CyaSSL lightweight SSL library has support for hardware-based cryptography and random number generation offered by the STM32 processor? Supported cryptographic algorithms include AES (CBC, CTR), DES (ECB, CBC), 3DES, MD5, and SHA1. For details regarding the STM32 crypto and hash processors, please see the STM32F2xx Standard Peripheral Library document (linked […]
Read MoreMore TagCyaSSL Release 2.8.0 Now Available
The bi-monthly release of CyaSSL, 2.8.0, is now ready to download from our website. New features include: – AES-GCM and AES-CCM use AES-NI – NetX default IO callback handlers – IPv6 fixes for DTLS Hello Cookies – The ability to unload Certs/Keys after the handshake, CyaSSL_UnloadCertsKeys() – SEP certificate extensions – Callback getters for easier […]
Read MoreMore TagRecent Security Compromise in Android Apps using Java Cryptography Architecture (JCA)
Earlier this month, Google announced that a security compromise had been found which affects applications that improperly initialize, or fail to initialize completely, the PRNG (pseudorandom number generator) before using it for key generation, signing, or random number generation. On the Android Developers Blog, Alex Klyubin, Android Security Engineer, stated that “We have now determined […]
Read MoreMore TagCyaSSL and SEP 2.0
Hi! If you are interested in IoT and specifically security of IoT, then you’ll probably like this article on SEP 2.0. SEP stands for Smart Energy Profile. This note is just to let our users know that we’re following the evolution of the standard as it relates to SSL/TLS, and have provided our CyaSSL embedded […]
Read MoreMore TagUsing CyaSSL with Cavium NITROX Security Processors
CyaSSL now supports the Cavium NITROX processors, thus enabling CyaSSL users to take advantage of the incredible performance boosts provided by the NITROX family. Cavium’s NITROX processors combine cryptographic acceleration with the latest security algorithms. The NITROX PX family can deliver performance ranging from 500 Mbps to 2.5 Gbps for full SSL protocol offload, and […]
Read MoreMore Tag
