At wolfSSL we provide two main services to help with the transition away from OpenSSL crypto operations, wolfEngine and wolfProvider. These both provide a plug and play solution to wolfSSL’s cryptography (which also can use our FIPS-140-3 module) in whatever application you may be using OpenSSL in. wolfEngine targets any application using OpenSSL 1.x using the engine API while wolfProvider targets 3.x/4.x using OpenSSL’s provider API. If you would rather drop OpenSSL entirely, we also offer an OpenSSL compatibility layer that lets you link your application against wolfSSL directly using the OpenSSL API it already calls.
With Executive Order 14412, “Securing the Nation Against Advanced Cryptographic Attacks,” the White House has set deadlines for federal systems and contractors to move to post quantum cryptography. Using wolfProvider you can keep your OpenSSL TLS solution intact and use the wolfSSL crypto solution underneath, which supports the NIST approved post quantum algorithms. Note that wolfEngine cannot provide post quantum algorithms. The OpenSSL 1.x engine API has no way to register new key types like ML-KEM and ML-DSA, so if PQC is a requirement you will need to move to OpenSSL 3.x and wolfProvider.
Check out each repo and try out some of our examples!
https://github.com/wolfssl/wolfprovider
https://github.com/wolfssl/wolfengine
If you have questions about any of the above, please contact us at facts@wolfssl.com or call us at +1 425 245 8247.
Download wolfSSL Now