51 Topic by shizuka

(0 replies, posted in Announcements)

The latest version of wolfSSH, 1.4.19, brings improvements, stability fixes and an additional feature! DH Group 14 with SHA-256 Key Exchange (KEX) support was added in with this release.

Along with this new feature some of the improvements that were added are: CI testing, macro guards around TTY modes, use of wolfSSL kyber implementation, and an update to the Espressif example. Among the fixes there were additions for gracefully handling non-existent directories with SFTP and handling of re-key/window full cases with wolfSSHd. For a full list of changes see the bundled ChangeLog.md.

Contact facts@wolfssl.com for more information regarding wolfSSL and wolfSSH.

If you have questions about any of the above, please contact us at facts@wolfssl.com or +1 425 245 8247.

Download wolfSSL Now

Go to forum: Announcements

52 Topic by shizuka

(0 replies, posted in Announcements)

wolfSSL release 5.7.4 is now available, with exciting optimizations for ARM devices and enhancements to post-quantum cryptography algorithms. If you’re using wolfSSL on RISC-V, we’ve also included new performance enhancements specifically for RISC-V devices. Alongside these optimizations and new features, several important fixes were made. One notable fix involves the behavior of X509_STORE_add_cert() and X509_STORE_load_locations() functions to better align with OpenSSL when the compatibility layer is enabled.
Below are some of the key changes in this release. For a more comprehensive list, refer to the ChangeLog.

New Features and Additions

  • RISC-V 64: Added new assembly optimizations for SHA-256, SHA-512, ChaCha20, Poly1305, and SHA-3 (PRs 7758, 7833, 7818, 7873, 7916).

  • DTLS 1.2 Connection ID: Implemented support for Connection ID (CID) (PR 7995).

  • DevkitPro Support: Added support for (DevkitPro)libnds (PR 7990).

  • Mosquitto: Added a port for Mosquitto OSP (Open Source Project) (PR 6460).

  • sssd: Added a port for init sssd (PR 7781).

  • eXosip2: Added support for eXosip2 (PR 7648).

  • STM32G4: Added support for STM32G4 (PR 7997).

  • MAX32665 and MAX32666: Added support for TPU hardware and ARM ASM crypto callback (PR 7777).

  • libspdm: Added support for building wolfSSL to be used in libspdm (PR 7869).

  • Nucleus Plus: Added support for use with Nucleus Plus 2.3 (PR 7732).

  • RFC5755 Attribute Certificates: Initial support for x509 attribute certificates (acerts) with --enable-acert (PR 7926).

  • PKCS#11 RSA Padding Offload: Allows tokens to perform CKM_RSA_PKCS (sign/encrypt), CKM_RSA_PKCS_PSS (sign), and CKM_RSA_PKCS_OAEP (encrypt) (PR 7750).

  • Heap/Pool Allocation: Added “new” and “delete” style functions for heap/pool allocation and freeing of low-level crypto structures (PRs 3166, 8089).

Espressif / Arduino Updates

  • Updated wolfcrypt settings.h

  • Updated Espressif SHA, utility, memory, and time helpers (PR 7955).

  • Fixed _thread_local_start and _thread_local_end for Espressif (PR 8030).

  • Enhanced benchmarking for Espressif devices (PR 8037).

  • Introduced Espressif common CONFIG_WOLFSSL_EXAMPLE_NAME in Kconfig (PR 7866).

  • Added wolfSSL esp-tls

  • Updated wolfSSL release for Arduino (PR 7775).

Post-Quantum Crypto Updates

  • Dilithium: Support for fixed-size arrays in dilithium_key (PR 7727).

  • Dilithium Precalc: Added option to use precalc with small sign (PR 7744).

  • Kyber FIPS: Allowed Kyber to be built with FIPS (PR 7788).

  • Kyber in Linux Kernel: Enabled Kyber ASM usage in Linux kernel module (PR 7872).

  • Dilithium, Kyber: Updated to final specifications (PR 7877).

  • Dilithium FIPS: Supported FIPS 204 Draft and Final Draft (PRs 7909, 8016).

ARM Assembly Optimizations

  • ARM32: Added assembly optimizations for ChaCha20 and Poly1305 (PR 8020).

  • Poly1305 Aarch64: Improved Poly1305 assembly optimizations for Aarch64 (PR 7859).

  • Poly1305 Thumb-2: Poly1305 Thumb-2

  • STM32CubePack: Added ARM ASM build option to STM32CubePack (PR 7747).

  • Visual Studio: Added ARM64 support to the Visual Studio project (PR 8010).

  • Kyber ARM Optimizations: Added assembly optimizations for ARM32, Aarch64, ARMv7E-M, and ARMv7-M (PRs 8040, 7998, 7706).

If you have questions about any of the above, please contact us facts@wolfssl.com or +1 425 245 8247.
wolfSSL is the best tested TLS

Go to forum: Announcements

53 Topic by shizuka

(0 replies, posted in Announcements)

wolfSSL is proud to announce the release of wolfProvider 1.0.1. This release contains several fixes and improvements. Most notably, we have added AES CFB support. A better logging of code execution has been added to make debugging easier. Scripted compilation of dependencies (such as wolfSSL and OpenSSL) have been added to get started easier.

WolfProvider is intended for use by customers who want to have a FIPS validated module, but are already invested with using OpenSSL. The provider gives drop-in replacements for the cryptographic algorithms used by OpenSSL. The wolfProvider uses the wolfCrypt engine underneath which is FIPS 140-3 certified.

Refer to the README.md found in the release for usage instructions. We also maintain a ChangeLog.md for a list of changes in each release.

If you have questions about any of the above, please contact us at facts@wolfssl.com or +1 425 245 8247.
wolfSSL is the best tested TLS

Go to forum: Announcements

54 Topic by shizuka

(0 replies, posted in Announcements)

wolfSSL is proud to announce the release of wolfProvider 1.0.0 (https://github.com/wolfSSL/wolfProvider … tag/v1.0.0). This release is the first official support for being a Provider for OpenSSL 3.x. Intended for use by customers who want to have a FIPS validated module, but are already invested in using OpenSSL. The provider gives drop-in replacements for the cryptographic algorithms used by OpenSSL. The wolfProvider uses the wolfCrypt engine underneath which is FIPS 140-3 certified.

Refer to the README.md (https://github.com/wolfSSL/wolfProvider … /README.md) found in the release for usage instructions. We also maintain a ChangeLog.md (https://github.com/wolfSSL/wolfProvider … angeLog.md) for a list of changes in each release.

If you have questions about any of the above, please contact us at facts@wolfssl.com or +1 425 245 8247.
wolfSSL is the best tested TLS

Go to forum: Announcements

55 Topic by shizuka

(0 replies, posted in Announcements)

It is Christmas in July! The summer release of wolfSSH is here, version 1.4.18!

Version 1.4.18 brings with it bug fixes, new features, and some enhancements as well! New features in this release include new algorithms and a memory configuration option.

We also have a nice round of enhancements which range from channel setup callbacks, better testing, improved portability, and more!

New Features

  • wolfSSL style static memory pool allocation support.

  • Ed25519 public key support.

  • Banner option for wolfSSHd configuration.

  • Non-blocking socket support to the example SCP client.

Improvements

  • Documentation updates.

  • Update the Zephyr test action.

  • Add a no-filesystem build to the Zephyr port.

  • Update the macOS test action.

  • Refactor certificate processing. Only verify certificates when a signature is present.

  • Update the Kyber test action.

  • Refactor the Curve25519 Key Agreement support.

  • Update the STM32Cube Pack.

  • Increase the memory that Zephyr uses for a heap for testing.

  • Add a macro wrapper to replace the ReadDir function.

  • Add callback hook for keying completion.

  • Add function to return strings for the names of algorithms.

  • Add asynchronous server side user authentication.

  • Add ssh-rsa (SHA-1) to the default user auth algorithm list when sha1-soft-disable is disabled.

  • Update Espressif examples using Managed Components.

  • Add SCP test case.

  • Refactor RSA sign and verify.

  • Refresh the example echoserver with updates from wolfSSHd.

  • Add callback hooks for most channel messages including open, close, success, fail, and requests.

  • Reduce the number of memory allocations SCP makes.

  • Improve wolfSSHd’s behavior on closing a connection. It closes channels and waits for the peer to close the channels.

Fixes

  • Refactor wolfSSHd service support for Windows to fix PowerShell Write-Progress.

  • Fix partial success case with public key user authentication.

  • Fix the build guards with respect to cannedKeyAlgoNames.

  • Error if unable to open the local file when doing a SCP send.

  • Fix some IPv6 related build issues.

  • Add better checks for SCP error returns for closed channels.

  • In the example SCP client, move the public key check context after the WOLFSSH object is created.

  • Fix error reporting for wolfSSH_SFTP_STAT.

  • In the example SCP client, fix error code checking on shutdown.

  • Change return from wolfSSH_shutdown() to WS_CHANNEL_CLOSED.

  • Fix SFTP symlink handling.

  • Fix variable initialization warnings for Zephyr builds.

  • Fix wolfSSHd case of non-console output handles.

  • Fix testsuite for single threaded builds. Add single threaded test action.

  • Fix wolfSSHd shutting down on fcntl() failure.

  • Fix wolfSSHd on Windows handling virtual terminal sequences using exec commands.

  • Fix possible null dereference when matching MAC algos during key exchange.

Visit our download page (https://www.wolfssl.com/download/) or wolfSSH GitHub repository (https://github.com/wolfSSL/wolfssh) to download the release bundle, and feel free to email us at facts@wolfssl.com or support@wolfssl.com or call us at +1 425 245 8247 with any questions about the wolfSSH embedded SSH library or other products.
wolfSSL is the best tested TLS

Go to forum: Announcements