curl up 2025 – Save The Date

Join us for curl up 2025: The Ultimate Event for curl Enthusiasts!

Mark your calendars! curl up 2025 is happening in Prague, Czech Republic, on May 3-4, 2025. This official annual developer conference for curl and libcurl brings together experts, contributors, and users from around the world. It’s the premier event for developers, engineers, and tech enthusiasts working with the curl project.

Date: May 3-4, 2025
Location: Pracovna, Vlkova 36, Praha 3 – Žižkov, 130 00, Czech Republic
Registration: Mandatory (details coming soon)
Fee: Free of charge

curl up 2025 is a unique gathering that celebrates the curl community and its future. Expect insightful sessions on the current state and roadmap of the curl project, security best practices, and emerging technologies. Engage in collaborative discussions on the project’s growth, sustainability, and team expansion.

We’d love to hear from you! If there’s a topic you’re passionate about or a session you’d like to attend, let us know. Your input will help shape the agenda for curl up 2025.

Join us in supporting curl, a crucial open-source project. We are currently seeking sponsors for curl up 2025. Your sponsorship will directly contribute to a community dedicated to maintaining curl’s robustness, security, and continued free accessibility.

Mark your calendars for May 3-4, 2025, and stay tuned for registration details.

See you in Prague!

If you have questions about any of the above, please contact us at facts@wolfSSL.com or call us at +1 425 245 8247.

Download wolfSSL Now

The definitive guide to Kernel vs. User Space Cryptography on Windows or Linux

We’re often asked if our cryptography library can be used in kernel, typically for use cases involving network or disk I/O. Indeed it can. Performing cryptographic operations inside the kernel has performance and security advantages, and is typically transparent to user mode applications and daemons. When is kernel mode cryptography the right solution, and what sorts of advantages can you expect?

Two common high level use cases for kernel mode crypto are network packet flow (VPNs, IPsec, MACsec, TLS offload, and packet authentication like TCP-AO) and disk encryption (for example, dm-crypt/LUKS and fscrypt). Much of the processing for network packets and block device I/O can be done entirely in kernel mode, but only if the required cryptographic operations are also performed in kernel mode. Performance will degrade significantly if that processing has to pass through a user mode process, as in a user mode VPNs such as StrongSwan with default configuration, or a FUSE-based cryptographic filesystem such as EncFS.

The common thread for all performance-motivated kernel crypto use cases is that the kernel is already in the critical path. Performing critical path operations in user mode introduces context switches and forces data copying, while kernel mode crypto leverages the existing data flow, with only the negligible overhead of function calls and pointer passing. If a design calls for leveraging a hardware crypto accelerator, kernel mode is a natural fit, due to the kernel’s direct access to memory-mapped physical resources.

Kernel mode crypto also allows a fundamentally higher level of security for specialized applications. Private keys and other highly sensitive data can be kept entirely in-kernel, safe from exposure. With trusted execution environments such as ARM TrustZone, Intel SGX, and AMD SEV-SNP, this data can be kept separate even from other kernel data, effectively defeating software-borne attacks even if the endpoint has been compromised.

wolfSSL has implemented Linux kernel cryptosystem plug-and-play functionality for all supported FIPS AES modes and key sizes, including XTS, CBC, CFB, GCM, OFB, CTR, and CCM, offering full turnkey (no code) support for dm-crypt/LUKS disk encryption and other kernel-mode applications. On amd64, our kernel AES implementations fully leverage AESNI and AVX, delivering state-of-the-art performance. We also support retargeting of the WireGuard kernel module to wolfCrypt, and can also retarget kernel mode WireGuard to use wolfCrypt FIPS cryptography directly. More kernel mode cryptographic algorithms are in process and available shortly, including registration of our AVX-accelerated post quantum implementations.

The full wolfCrypt native API is available in-kernel to other kernel modules, including full support for FIPS 140-3. We have also ported our full TLS stack to the kernel, allowing special use cases with TLS1.3 and DTLS1.3 endpoints resident in kernel space. TLS 1.3 in the kernel allows for encrypted communication links directly to kernel threads for maximum security.

How do you decide when Kernel Mode cryptography or TLS is appropriate for your use case? Typically you are looking for a security advantage or a performance advantage, or both. We can help! Contact us at facts@wolfSSL.com and we can support you through benchmarking and security concerns to guide your decisions.

If you have questions about any of the above, please contact us at facts@wolfSSL.com or +1 425 245 8247.

Download wolfSSL Now

wolfProvider 1.0.2: Enhanced Compatibility

The wolfSSL team has released wolfProvider version 1.0.2, introducing several new features and important fixes!

New Features

  • RSA Verify Recover Support: Adds functionality for RSA verify recover operations, enhancing compatibility with applications requiring this capability.
  • DES3 Implementation: Provides legacy application support with DES3 CBC mode implementation.
  • Open Source Integration Testing: New workflows for automated testing with NGINX, cURL, and OpenVPN, ensuring compatibility across applications.

Enhancements and Fixes

  • RSA Improvements: Better key type handling during import operations and fixed parameter handling for proper functionality.
  • AES-GCM Stream Handling: Enhanced IV handling for compatibility with OpenSSH workflows.
  • ECC Parameter Encoding: Fixed encoding for OpenSSL genpkey compatibility, resolving interoperability issues.

Stability Improvements

  • FIPS Testing Capabilities: Enhanced testing for FIPS compliance scenarios.
  • Error Handling: Improved logging and error reporting throughout the codebase.
  • Documentation Updates: Enhanced examples and documentation for easier integration.

Check out the ChangeLog for a full list of features and fixes.

Stay updated with wolfProvider for ongoing enhancements! If you have questions about any of the above, please contact us at facts@wolfSSL.com or call ua at +1 425 245 8247.

Download wolfSSL Now

curl Distro Discussion 2025 – Save The Date

Join the second annual curl Distro Discussion on April 10th at 3 PM UTC (5 PM CEST). This online event brings together Linux and BSD distributions, OS maintainers, and the curl community for an in-depth two-hour conference. The event is free and open to anyone interested in improving curl’s integration within operating systems and package distributions.

Join us: curl Distro Discussion 2025
Date: April 10th | 3 PM UTC (5 PM CEST)

This is a unique opportunity for curl developers, maintainers, and distributors to discuss important aspects of curl deployment across various operating systems. Our goal is to make curl more efficient and secure within distributions.

Key discussion topics include:

  • Enhancing curl’s build system, third-party library, and documentation for distributors
  • Strategies to streamline security advisories and patch management
  • Discussion on HTTP/3, long-term support, and TLS advancements
  • Exploring Post-Quantum Cryptography in curl
  • The future of wcurl and trurl
    And more…

Feel free to add your own proposed discussion topics and sign up as an intended participant. Mark your calendar for April 10th at 3 PM UTC (5 PM CEST) and be part of shaping curl’s future in distributions and secure networking.

Check out the details of curl Distro Discussion 2025, and share this invitation with others in the open-source and security communities to help spread the word and ensure the right people are invited.

If you have questions about any of the above, please contact us at facts@wolfSSL.com or call us at +1 425 245 8247.

Download wolfSSL Now

Announcing STM32H7S Support in wolfCrypt

We are excited to announce wolfCrypt support for the STM32H7S, the latest high-performance microcontroller from STMicro. This Cortex-M7 (600MHz) part is designed to leverage external flash, offering new possibilities for embedded security and cryptographic applications.

Performance Insights: STM32H7S + wolfCrypt

In our testing, the STM32H7S’s onboard cryptography hardware demonstrated impressive performance across various algorithms. The hardware acceleration provided by STMicro allowed for faster cryptographic operations and reduced CPU load, making it an ideal choice for performance-critical applications.

The hardware cryptography for symmetric AES and SHA2 was much faster than our software implementation. The hardware PKA for ECC was slower than our Single Precision Cortex-M assembly (sp_cortexm.c). The software AES performance on the STM32H7S was slower than usual due to the external flash eXecute In Place (XIP) swapping because of the AES table lookups. This could be further optimized in the future.

The STM32 symmetric (AES/HASH) hardware cryptography support is enabled by default unless NO_STM32_CRYPTO or NO_STM32_HASH are defined. To enable the PKA (ECC) hardware acceleration make sure WOLFSSL_STM32_PKA is defined. To force use of the Single Precision speedups define WOLFSSL_HAVE_SP_ECC and WOLFSSL_SP_ARM_CORTEX_M_ASM.

Below are benchmark results comparing the onboard STM cryptography hardware with wolfCrypt software cryptography on the STM32H7S.


What’s Next: wolfBoot Port and Hardware-Based Root of Trust

Our work doesn’t stop here. We are currently developing a wolfBoot port for the STM32H7S, which will include support for their hardware-based root of trust. This integration will provide enhanced secure boot capabilities, ensuring firmware integrity and protection against unauthorized modifications.

Stay tuned for further updates as we continue to optimize and expand our support for cutting-edge hardware platforms like the STM32H7S.

For more information on wolfCrypt and how it integrates with the STM32H7S, visit our documentation or reach out to our team at facts@wolfSSL.com or +1 425 245 8247.

Download wolfSSL Now

Live Webinar: Accelerated Encryption for STM32 MPUs with wolfSSL

Secure Your STM32 MPUs with wolfSSL’s High-Performance Encryption.

Join wolfSSL and STMicroelectronics for an exclusive partner webinar on ‘Accelerated Encryption with wolfSSL and STM32 MPUs’ on March 26th at 9 AM PT.

Register now: Accelerated Encryption with wolfSSL and STM32 MPUs
Date: March 26th | 9 AM PT

Why Attend?

STMicroelectronics has launched the ST32 Arm Cortex MPUs, designed for industrial applications that require high processing power and low energy consumption. Securing these devices is crucial to ensuring IoT security and embedded system protection.

wolfSSL brings high-performance encryption to STM32 MPUs, supporting both bare-metal and OpenSTLinux environments, with FIPS 140-3 compatibility.

This webinar will cover:

  • Technology insights from wolfSSL and STMicroelectronics
  • Running wolfSSL in bare-metal and OpenSTLinux environments
  • Live Demo: wolfSSL on the STM32MP1 and STM32MP2

Register now to take the first step towards optimizing cryptographic performance in your STM32 MPU projects.

As always, our webinar will include Q&A throughout. If you have questions about any of the above, please contact us at facts@wolfSSL.com or +1 425 245 8247.

Download wolfSSL Now

wolfSSL Accelerates Cryptography on Xilinx Hardware—With More to Come!

At wolfSSL, we are ensuring that embedded systems, IoT devices, and high-performance computing platforms benefit from the fastest and most secure cryptographic solutions available. Leveraging the available Xilinx hardware acceleration allows for high-speed encryption, decryption, and hashing with minimal CPU overhead, making it ideal for applications in aerospace, defense, automotive, networking, and industrial automation. wolfSSL’s integration with Xilinx hardware accelerators increases performance with AES-GCM, ECC, RSA and SHA3 operations. In addition there is also support for TRNG’s on Versal boards.

As we continue to enhance wolfSSL’s cryptographic performance on hardware accelerators, we’re excited about the next generation of Adaptive SoCs from AMD/Xilinx—specifically, the Versal Gen 2 Prime Series.

These next-gen platforms introduce a new Application Security Unit (ASU). Stay tuned for updates on wolfSSL leveraging the latest cryptographic hardware accelerators available on AMD/Xilinx devices!

Want to learn more about wolfSSL’s hardware acceleration roadmap or have any questions? Reach out to us today at facts@wolfSSL.com or call us at +1 425 245 8247.

Download wolfSSL Now

LMS in wolfPKCS11

wolfSSL is excited to announce upcoming support for the Leighton-Micali Signature (LMS) scheme in wolfPKCS11. This implementation builds upon our existing LMS support in wolfCrypt to provide a complete PKCS#11 API interface for LMS operations.

LMS, a stateful hash-based signature scheme standardized in RFC 8554 and approved by NIST SP 800-208, is already incorporated into the latest version of the PKCS#11 specification. This quantum-resistant signature scheme is designed to be resistant to attacks from quantum computers and is best used in off-line signing operations such as firmware signing.

The addition of LMS support to wolfPKCS11 will enable applications using the PKCS#11 interface to leverage wolfSSL’s proven LMS implementation.

Key Features:

  • Complete PKCS#11 API support for LMS operations
  • Quantum-resistant stateful hash based signature scheme
  • Compliant with NIST SP 800-208 specifications

This enhancement demonstrates wolfSSL’s continued commitment to providing comprehensive support for post-quantum cryptography across our product line.

If you have questions about any of the above, please contact us at facts@wolfSSL.com or +1 425 245 8247.

Download wolfSSL Now

Announcing WebSocket Support in wolfMQTT

We are excited to announce that wolfMQTT now fully supports MQTT over WebSockets, including both standard WebSockets and secure WebSockets (WSS). Read more about websockets here. This significant enhancement allows wolfMQTT clients to connect to MQTT brokers through WebSocket endpoints, expanding the versatility of our lightweight MQTT client implementation.

Why Websockets Matter for MQTT

WebSockets provide several advantages for MQTT deployments:

  1. Firewall Traversal: WebSockets operate over HTTP ports (80 and 443), which are typically open in most network environments, allowing MQTT traffic to pass through firewalls that might block traditional MQTT ports.
  2. Web Integration: WebSockets enable seamless integration between web applications and MQTT, making it easier to build web-based IoT dashboards and control interfaces.
  3. Proxy Compatibility: WebSockets can work through HTTP proxies, extending the reach of MQTT in corporate environments.
  4. Enhanced Security: Secure WebSockets (WSS) leverage TLS encryption, providing the same level of security as MQTT over TLS.

The WebSocket implementation has been tested with popular MQTT brokers including:

  • Mosquitto
  • HiveMQ
  • VerneMQ

The addition of WebSocket support to wolfMQTT enhances its versatility and makes it even more suitable for a wide range of IoT applications, especially those that need to operate in restricted network environments or integrate with web applications.

This feature is available now in the latest version of wolfMQTT. We encourage our users to try it out and provide feedback. As always, we’re committed to maintaining the lightweight, secure, and efficient nature of our MQTT client implementation while expanding its capabilities.

Check out our example!

For more information, visit our [GitHub repository].

If you have questions about any of the above, please contact us at facts@wolfSSL.com or call us at +1 425 245 8247.

Download wolfSSL Now

Live Webinar: wolfHSM Design for Automative Hardware Security Modules

Learn how wolfHSM enhances automotive security by providing powerful cryptographic protection and seamless hardware integration.

Register today: wolfHSM Design for Automotive Hardware Security Modules
Date: March 20th | 10 AM PT

wolfHSM is a versatile hardware security module (HSM) framework that secures cryptography, key management, and storage. Integrated with wolfBoot, it enhances firmware update security by offloading cryptographic tasks to the HSM. Compatible with hardware like Infineon Aurix TriCore TC3XX, it supports post-quantum algorithms, SM ciphers, and FIPS 140-3 compliance, ensuring robust automotive security.

Join us for an exclusive webinar on automotive HSMs, where wolfSSL Software Engineer Bill Phipps will explore the crucial role of wolfHSM in safeguarding modern vehicles. Stay ahead in the fast-evolving field of automotive security by gaining insights into the integration, functionality, and advantages of wolfHSM in automotive applications.

What This Webinar Will Cover:

  • Overview of wolfHSM: Key features and how it enhances automotive system security.
  • Cryptographic Capabilities: Support for post-quantum cryptography, SM ciphers, and FIPS 140-3 compliance.
  • Hardware Integration: Best practices for integrating wolfHSM with Infineon Aurix TriCore TC3XX and other automotive platforms.
  • Security for ECUs: How wolfHSM secures Electronic Control Units (ECUs) and other critical vehicle components.
  • Hands-On Demo: Live demonstration showcasing wolfHSM in action on automotive hardware.

Secure your spot today and gain practical insights on how wolfHSM can elevate your automotive security framework.

Register Now!

As always, our webinar will include Q&A throughout. If you have questions about any of the above, please contact us at facts@wolfSSL.com or +1 425 245 8247.

Download wolfSSL Now

Posts navigation

1 2 3