wolfSSL is extremely proud to announce that an additional 18 OEs (Operating Environments) have been added to cert #3389 with only a 62-day turnaround from the CMVP between submission and approval: Feb 23 2023 – April 26 2023. INFO: Cert Location: https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/3389 SunSet Date: 3/3/2024 Operating Environments validated (raw count): 73 Operating Environments validated (non-PAA […]
Read MoreMore TagCategory: Uncategorized
wolfSSL Embraces ASCON Lightweight Cryptography
The cryptography world is abuzz with the new proposed NIST standard, Ascon. Earlier this year, NIST selected the Ascon family “for lightweight cryptography applications as it meets the needs of most use cases where lightweight cryptography is required”. More details can be found at the NIST News Update. We at wolfSSL have been testing an […]
Read MoreMore TagOpenSSL 1.1.1 EOL
Have you heard the news from the OpenSSL blog? If you are using the 1.1.1 branch of releases of OpenSSL, come September 11, 2023, there will be no more updates. You can get the details here: https://www.openssl.org/blog/blog/2023/03/28/1.1.1-EOL/ That said, you can breathe a sigh of relief because wolfSSL is here to help. We have three […]
Read MoreMore TagFree wolfSSL Training Course (April 19th & 20th)
If you’re interested in learning more about SSL/TLS or the wolfSSL lightweight SSL library, then you’re in luck. wolfSSL is offering a free 2-day (4 hours each day) training course on wolfSSL. The next instance of this training course will take place April 19th & 20th from 12:00 PM to 5:00 PM (UTC) both days. […]
Read MoreMore TagDTLS 1.2 and 1.3 Stateless ClientHello Parsing
wolfSSL implements support for both client side and server side DTLS. The server side requires extra attention when it comes to Denial-of-Service (DoS) attacks. One way to mitigate DoS on DTLS servers is to operate statelessly until a cookie exchange is completed with the peer. The cookie exchange is implemented in all versions of DTLS. […]
Read MoreMore TagwolfSSH Release v1.4.13
wolfSSL Inc is proud to announce an important incremental update to wolfSSH: v1.4.13! In this release, we fix a severe user authentication bug in wolfSSHd. It is highly recommended that anyone using wolfSSHd upgrade to this version immediately (see Vulnerabilities in the change log below). We have added a STM32Cube Expansion Pack for building in […]
Read MoreMore TagwolfSSH STM32Cube Expansion Package for STM32 is now available!
wolfSSH offers all the functionality of a SSH server and client in a compact and microcontroller friendly library and is now available for use as an STM32Cube Package. wolfCrypt, the crypto engine for wolfSSH, heavily supports STM32 hardware and now you can leverage wolfSSH as an SSH solution in the same environment. wolfSSH supports SSH […]
Read MoreMore TagwolfSSL pthread_rwlock Support
wolfSSL uses mutexes for most locking synchronization. In release 5.6.0 we have added support for pthread_rwlock_t (https://github.com/wolfSSL/wolfssl/pull/5952 and https://github.com/wolfSSL/wolfssl/pull/6086). It is currently implemented in the session caching logic. This will speed up multi-threaded servers by allowing multiple threads to read from the cache simultaneously. We also recommend multi-threaded servers to define ENABLE_SESSION_CACHE_ROW_LOCK when building wolfSSL. […]
Read MoreMore TagwolfSSL Supported Open Source Projects
wolfSSL makes a great effort to support many different projects. We provide patches for projects to leverage our OpenSSL Compatibility Layer and work with maintainers to upstream support whenever possible. This blog is a list of currently supported open source projects. The support type denotes how wolfSSL is supported. “Patch” means that we provide a […]
Read MoreMore TagwolfSSL Release Version 5.6.0
wolfSSL release version 5.6.0 is available now! A couple things to note with this release is that the new and improved ASN parsing, and generation, code is enabled by default now. Additionally we have the upcoming deprecation of –enable-heapmath which is scheduled to be removed by 2024. This release also saw the addition of DTLS […]
Read MoreMore Tag