Hi! We continue to make progress on our upcoming FIPS 140-3 certification. We have now completed code review, and are working with our lab on operational testing. The process will be in NIST’s hands after that. Our goal is to be the first software cryptographic library with a FIPS 140-3 certification, and that looks like […]
Read MoreMore TagCategory: Uncategorized
Leveraging Virtual Memory in the Linux Kernel
In wolfSSL release 4.7, the Linux kernel module implementation has been enhanced to use kvmalloc() and kvfree() for heap-based storage. The typical approach using kmalloc() allocates physically contiguous memory, with meaningful limitations on the maximum size of allocation and the impact of those allocations on other system components. kvmalloc(), by contrast, uses vmalloc() internally to […]
Read MoreMore TagReproducible Builds for Confident Testing and Release Engineering
wolfSSL release 4.7 includes –enable-reproducible-build, a new configuration option that suppresses the binary jitter (timestamps and other non-functional metadata) that is otherwise common in various build processes. With –enable-reproducible-build, test and release engineers can carefully align build environments, then generate bitwise-identical binary packages with identical hashes. Using –enable-reproducible-build, FOSS binary distributors can publish their build […]
Read MoreMore TagwolfBoot support for ARM TrustZone
Since version 1.7.1, wolfBoot provides support for secure boot on systems with a Trusted Execution Environment (TEE). wolfBoot provides embedded developers with a code base that complies with the specification for the separation between secure and non-secure world, on those CPUs and microcontrollers that support it. On ARMv8 Cortex-A CPU and Cortex-M microcontrollers it is […]
Read MoreMore TagwolfSSL Expands Compatibility Layer for OpenSSL Applications
The wolfSSL OpenSSL compatibility layer is a means to switch applications designed for OpenSSL over to use wolfSSL. In addition to this, it is constantly expanded and currently has more than 500 commonly used OpenSSL functions. wolfSSL also provides Crypto API support to enable easier migration of projects. We recently added some more in our […]
Read MoreMore TagwolfSSL 4.7.0 Supports user_settings.h for CMake Builds
wolfSSL is happy to announce support for user_settings.h in CMake builds in wolfSSL 4.7.0. To enable this feature, add -DWOLFSSL_USER_SETTINGS=yes to your cmake command and proceed to use user_settings.h as you normally would. For more about user_settings.h, continue reading below. When building for embedded devices the best way to configure the wolfSSL library is to […]
Read MoreMore TagstrongSwan + wolfSSL + FIPS!
As some may be aware, wolfSSL added support for strongSwan in April of 2019. The upstream commit can be reviewed here: https://github.com/strongswan/strongswan/pull/133 Users can test the latest development master of wolfSSL with the latest version of strongSwan using the following setup: wolfSSL Build and Installation Steps $ git clone https://github.com/wolfSSL/wolfssl.git $ cd wolfssl $ ./autogen.sh […]
Read MoreMore TagWho’s testing that cryptography on your platform? With your hardware encryption? With your secure element?
Three of our biggest engineering investments at wolfSSL are testing, testing, and testing. We invest heavily in testing, so that you don’t have to. We develop and test with 30+ operating systems, 10+ compilers, 50+ chipsets, 20+ hardware encryption IP schemes, and 15+ secure enclaves. We add more of the above to our Jenkins based […]
Read MoreMore TagwolfSSL Supports Stunnel 5.57
wolfSSL is happy to announce support for the latest stable version of stunnel, version 5.57. Per the stunnel website, “Stunnel is a proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the programs’ code.” wolfSSL also supports version 5.40 of stunnel. If you’re in need of a fast, […]
Read MoreMore TagwolfMQTT Release v1.8.0
The winter release of wolfMQTT, v1.8.0, is now available! This release has several bug fixes and optimizations including: Fixes for non-blocking in WIN32 and large payload (PR #202) Make TLS IO callback functions public (PR #201) Bug fixes (PR #186, 188, 189, 193, 196, 199, 200) Update default test broker (PR #194) MQTT-SN fixes for […]
Read MoreMore Tag