RECENT BLOG NEWS

The FREAK Attack exploits legacy SSL cipher suites from the 1990s that use RSA export keys.  By definition a server in export mode has to use a low bit strength RSA key (512 bits or less), which can now be cracked in around 12 hours.  Even if a client supports export cipher suites but doesn’t […]

Release 3.4.0 wolfSSL has bug fixes and new features including: • wolfSSL API and wolfCrypt API, you can still include the cyassl and ctaocrypt headers which will enable the compatibility APIs for the foreseeable future • Example use of the wolfCrypt API can be found in wolfcrypt/test/test.c • Example use of the wolfSSL API can […]

We currently in the process of changing the name of our embedded SSL/TLS library from CyaSSL to wolfSSL. This name change benefits our users and us a with a more consistent and standardized naming convention across our company and products. A CyaSSL compatibility layer will remain available for those wanting to continue using the CyaSSL […]

Hi! We are currently seeking an additional senior C/C++ developer for our team. Ideally, our best candidates will have 5+ years of experience coding C/C++. Experience at the systems level, working with networking protocols, working with cryptography, and an affinity for open source are useful but not necessary. This is a position where you will […]

As a lightweight, embedded SSL library, wolfSSL has been used to secure many smart home devices such as lighting, garage doors, washers and dryers, thermostats, as well as a variety of other appliances. Security may not be the first thought when developing a smart home device, but there remains the risk of an attacker gaining […]

Hi! This note is to announce that we will be FIPS 140-2 validating our cryptography library, wolfCrypt, on the FreeRTOS platform. If you need FIPS validated crypto on FreeRTOS, let us know at facts@wolfssl.com.

For those of you who have been following our FIPS progress, we are now in the “Review Pending” phase.  See:  http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140InProcess.pdf (this link is out of date and obsolete, as wolfCrypt now has 2 FIPS validation certificates – #2425 and #3389)

A block cipher is an encryption method that applies a deterministic algorithm along with a symmetric key to encrypt a block of text, rather than encrypting one bit at a time as in stream ciphers. For example, a common block cipher, AES, encrypts 128 bit blocks with a key of predetermined length: 128, 192, or […]

wolfSSL is proud to announce that several wolfCrypt algorithms have received FIPS 140-2 algorithm certificates. The National Institute of Standards and Technology (NIST) website has been updated to reflect wolfSSL`s validation. wolfSSL`s wolfCrypt has received the following certificate numbers and can be viewed at the respective links. AES validation certification #3157 https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=3157 Triple DES validation certification #1800 […]

If you are looking for an SSL/TLS library to provide security in connected ARM environments, wolfSSL is by far the best choice. wolfSSL is an ARM partner, and our code has been optimized for ARM environments. Public key operations in CyaSSL (wolfSSL) have optimized assembly code that gives wolfSSL faster RSA, Diffie-Hellman, and DSA times. […]