wolfSSL FIDO Compliance As organizations move away from traditional password-based authentication, FIDO (Fast Identity Online) has emerged as one of the leading standards for strong authentication. wolfSSL is positioned to support this transition with our robust cryptography library, wolfCrypt, which implements many of the core algorithms required for FIDO compliance. This blog outlines how wolfSSL […]
Read MoreMore TagCategory: Uncategorized
Dilithium Support in wolfCLU
We have added the Dilithium command to wolfCLU. Dilithium (referred to as ML-DSA by NIST) is a post-quantam cryptography (PQC) algorithm for signing and verification. This blog post provides an overview of how to use the Dilithium command in wolfCLU. To use the Dilithium command, you must first build wolfSSL with the appropriate configuration options: […]
Read MoreMore TagRenesas RX TSIP with ECDSA and Crypto Callbacks
wolfSSL now has support for Renesas RX TSIP with ECDSA and crypto callbacks. This update provides broader flexibility and security for embedded systems with Renesas RX TSIP. Below is a summary of the key changes and updates that were added in PR# 7685: Key Changes and Features Renesas RX TSIP with ECDSA SupportWolfSSL now fully […]
Read MoreMore TagwolfSSL Enhances PowerPC Support on Darwin
At wolfSSL, we are committed to supporting a wide range of platforms and architectures, ensuring that our SSL/TLS library can be used across various environments. One of the platforms we continue to support is PowerPC, both in 32-bit and 64-bit configurations. The latest updates to our PowerPC support primarily focus on resolving compatibility issues with […]
Read MoreMore TagExtended Key Update for Transport Layer Security (TLS) 1.3
The Extended Key Update extension for (D)TLS 1.3 is a draft proposal for a new key update mechanism. (D)TLS 1.3 lacks perfect forward secrecy (PFS) for long-lived sessions, leaving them vulnerable to key exfiltration attacks. The proposed Extended Key Update mechanism addresses this by incorporating minimal key exchanges during key updates. This safeguards connections by […]
Read MoreMore TagwolfSSL DTLS 1.2 Connection ID
wolfSSL release 5.7.4 includes an exciting new feature. We have implemented Connection ID (CID) support for DTLS 1.2 (RFC 9146). CID is a new feature in DTLS 1.2 that allows for better handling of connection migration. Without it, DTLS connections are tied to the IP 5-tuple making it unable to recover the connection if one […]
Read MoreMore TagwolfSSL libspdm Support
wolfSSL has added support for libspdm 3.3.0. libspdm is the reference implementation of the DMTF’s Security Protocols and Data Models (SPDM specifications). The goal of the SPDM specifications is to provide device attestation and authentication as well as secure communication over any transport. Both wolfSSL and SPDM are designed to operate on any transport. Our […]
Read MoreMore TagAI-automated fuzz testing uncovered a vulnerability in wolfSSL
Code Intelligence is happy to announce the discovery of a heap-based use-after-free vulnerability in wolfSSL, identified through a fuzz test automatically generated by an AI Test Agent. This marks another milestone in advancing automated security testing and demonstrates the power of AI-driven tools to improve software reliability and safety. Discovery and Resolution The vulnerability was […]
Read MoreMore TagwolfSSL SSSD Support
We have ported the System Security Services Daemon (SSSD) to use wolfSSL for its SSL/TLS support. SSSD provides a set of daemons that allow access to identity and authentication providers. SSSD is used to connect to remote directories and authentication mechanisms such as LDAP, Kerberos, or FreeIPA. The wolfSSL SSSD port allows organizations to leverage […]
Read MoreMore TagwolfSSL Support for STM32G4
wolfSSL now has support for STM32G4 microcontrollers. With new features that enable better performance and flexibility for cryptographic operations on STM32G4 hardware. Below is a summary of the key changes and updates that were made in PR #7997: Key Changes and Features User Settings Synchronization: The `user_settings_stm32.h` configuration file has been synchronized with the STM32Cube […]
Read MoreMore Tag