Did you know that the wolfSSL embedded SSL/TLS library supports the Renesas Trusted Secure IP Driver (TSIP) and has been tested on the Renesas RX65N platform? Using the TSIP driver, wolfSSL can offload supported cryptographic and TLS operations to the underlying Renesas hardware for increased performance.
wolfSSL has been integrated with the following TSIP capabilities:
- TSIP driver open/close
- Random number generation, tested with SP 800-22
- SHA-1 and SHA-256 hash function support
- AES-128-CBC and AES-256-CBC support
- TLS capabilities including:
- Root CA verification
- Client and/or Server certificate verification including intermediate certificate verification
- Support for four TLS cipher suites:
- TLS_RSA_WITH_AES_128_CBC_SHA
- TLS_RSA_WITH_AES_128_CBC_SHA256
- TLS_RSA_WITH_AES_256_CBC_SHA
- TLS_RSA_WITH_AES_256_CBC_SHA256
The following benchmarks show the performance improvement when using hardware cryptography on the Renesas RX65N through the Renesas TSIP driver.
| Algorithm | Software Crypto | TSIP Accelerated Crypto |
|---|---|---|
| RNG | 231.160 KB/s | 1.423 MB/s |
| SHA | 1.239 MB/s | 22.254 MB/s |
| SHA-256 | 515.565 KB/s | 25.217 MB/s |
| Cipher Suite | Software Crypto (sec) | TSIP Accelerated Crypto (sec) |
|---|---|---|
| TLS_RSA_WITH_AES_128_CBC_SHA | 0.381 | 0.028 |
| TLS_RSA_WITH_AES_128_CBC_SHA256 | 0.383 | 0.028 |
| TLS_RSA_WITH_AES_256_CBC_SHA | 0.382 | 0.030 |
| TLS_RSA_WITH_AES_256_CBC_SHA256 | 0.385 | 0.029 |
If you have questions about our TSIP support, or are interested in trying this in your environment, contact us at facts@wolfssl.com! More information can be found on our Renesas TSIP webpage as well.