Every hardware cryptography scheme wolfSSL has ever enabled

At wolfSSL we support hardware cryptography for a wide range of platforms. The benefits of hardware cryptography include reduced code footprint size, improved security, acceleration of cryptographic operations, and utilization of true random number generators. For example, this allows everything from wolfBoot to TLS cipher suites to enjoy acceleration of cryptographic operations.

Furthermore, we have deep partnerships with industry leaders such as Intel, NXP, and Renesas. We support standard Intel instruction extensions such as AES-NI, AVX, and ADX and BMI2, and have recently published a joint whitepaper on using wolfBoot with 11th Gen Intel Core processors. We also support NXP’s Cryptographic Accelerator and Assurance Module (CAAM), and have leveraged this for hardware acceleration on a number of NXP i.MX series processors. Other examples include Espressif and Analog Devices, to name but a few.

If you’re curious for a list of every hardware cryptography scheme and platform we have enabled, then read on:

• • AES-NI: Intel 64 and IA-32 Xeon and Core, and AMD Zen processor families. 
    

    AES–GCM	128, 192, 256 bit
    AES–CCM	128, 192, 256 bit
    AES–CBC	128, 192, 256 bit
    AES–ECB	128, 192, 256 bit
    AES–CTR	128, 192, 256 bit

    References:

    1. https://www.wolfssl.com/white-paper-applying-wolfboot-to-11th-gen-intel-core-processors-for-secure-boot/

 

• • AVX1/AVX2: Intel and AMD x86. 
    

    SHA3, SHA2	SHA-256, SHA-384, SHA-512
    AES–GCM	128, 192, 256 bits
    ChaCha20-Poly1305	256 bit AEAD stream cipher
    Poly1305

    References:

    1. https://www.wolfssl.com/wolfssl-performance-intel-x86_64-part-2/
    2. https://www.wolfssl.com/wolfssl-performance-intel-x86_64-part-3/
    3. https://www.wolfssl.com/intels-extended-instructions-accelerates-hash-algorithms/

 

• • Intel ADX and BMI2: Intel and AMD x86. 
    

    RSA
    Curve25519	256 bit
    Ed25519	256 bit

    References:

    1. https://www.wolfssl.com/wolfssl-performance-intel-x86_64-part-5/
    2. https://www.wolfssl.com/wolfssl-performance-intel-x86_64-part-6/

 

• • RDRAND/RDSEED: Intel 64 and IA-32, and AMD Zen processor families. 
    

    RNG

    References:

    1. https://www.intel.com/content/www/us/en/developer/articles/guide/intel-digital-random-number-generator-drng-software-implementation-guide.html
    2. https://www.amd.com/content/dam/amd/en/documents/pdfs/developer/aocl/amd-secure-random-number-generator-library-2.0-whitepaper.pdf

 

• • NXP Coldfire SEC: (MCF547X and MCF548X family of processors) 
    

    AES–CBC	128, 192, 256 bit
    3DES–CBC	192 bit
    DES–CBC	64 bit

    References:

    1. https://www.wolfssl.com/docs/nxp/

 

• • NXP Coldfire CAU/mmCAU: (NXP Coldfire and Kinetis) 
    

    AES–GCM	128, 192, 256 bit
    AES–CCM	128, 192, 256 bit
    AES–CBC	128, 192, 256 bit
    AES–ECB	128, 192, 256 bit
    AES–CTR	128, 192, 256 bit
    3DES
    SHA2	SHA-256
    SHA1
    HMAC	SHA1, SHA2
    MD5

    References:

    1. https://www.wolfssl.com/docs/nxp/
    2. https://www.wolfssl.com/improved-nxp-mmcau-crypto-hardware-performance/
    3. https://www.wolfssl.com/improved-nxp-mmcau-crypto-hardware-performance-2/

 

• • STMicroeletronics STM32 L4, F1, F2, F4 and F7: 
    

    AES–GCM	128, 192, 256 bit
    AES–CBC	128, 192, 256 bit
    AES–ECB	128, 192, 256 bit
    AES–CTR	128, 192, 256 bit
    SHA2	SHA-224, SHA-256
    SHA1
    MD5
    RNG

    References:

    1. https://www.wolfssl.com/docs/benchmarks/#stm32
    2. https://www.wolfssl.com/docs/benchmarks/#stm32f777ni

 

• • Marvell (Cavium) Nitrox V and III: 
    

    AES–GCM	128 bit
    AES–CBC	128, 192, 256 bit
    RSA	2048 bit
    ECC
    ECDSA
    RNG

    References:

    1. https://www.wolfssl.com/wolfssl-asynchronous-support/
    2. https://www.wolfssl.com/wordpress/wp-content/uploads/2018/04/wolfssl_async.pdf

 

• • Microchip PIC32 MX/MZ: 
    

    AES–CTR	128, 192, 256 bit
    AES–CBC	128, 192, 256 bit
    DES/3DES–CBC	64 bit / 192 bit
    SHA2	SHA-256
    SHA1
    HMAC	SHA1, SHA2
    MD5

    References:

    1. https://www.wolfssl.com/docs/pic32/

 

• • Texas Instruments Crypto Connected Launchpad: (TI TM4C series boards) 
    

    AES–GCM	128, 192, 256 bit
    AES–CCM	128, 192, 256 bit
    AES–CBC	128, 192, 256 bit
    AES–ECB	128, 192, 256 bit
    AES–CTR	128, 192, 256 bit
    DES–CBC	64 bit
    3DES–CBC	192 bit
    SHA2	SHA-224, SHA-256
    SHA1
    MD5

    References:

    1. https://www.ti.com/lit/ug/spmu372a/spmu372a.pdf
    2. https://www.ti.com/tool/EK-TM4C129EXL

 

• • Nordic NRF5x: 
    

    AES–ECB	128 bit
    RNG

    References:

    1. https://www.wolfssl.com/true-random-vs-pseudorandom-number-generation/
    2. https://www.wolfssl.com/wolfssl-on-nordic-nrf52/

 

• • 
    Microchip/Atmel ATECC508A/ATECC608A: 

    ECC	256 bit (NIST-P256)

    References:

    1. https://www.wolfssl.com/docs/atmel/
    2. https://www.wolfssl.com/wolfssl-support-atecc508aatecc608a-crypto-coprocessor-2/
    3. https://www.wolfssl.com/using-wolfssl-on-the-atmel-atecc508a-with-tls-1-3-tls13/

 

• • Espressif ESP32: 
    

    AES–GCM	128, 192, 256 bits
    AES–CBC	128, 192, 256 bits
    RSA	2048
    SHA2	SHA-256, SHA-384, SHA-512

    References:

    1. https://www.wolfssl.com/docs/espressif/

 

• • ARMV8: 
    

    AES–GCM	128, 192, 256 bit
    AES–CCM	128, 192, 256 bit
    AES–CBC	128, 192, 256 bit
    SHA256

    References:

    1. https://www.wolfssl.com/wolfssl-on-armv8-lemaker-2/

 

• • Intel QuickAssist Technology: 
    

    RSA	2048 bits
    AES–GCM	128, 192, 256 bits
    AES–CBC	128, 192, 256 bits
    3DES
    SHA2	SHA-256, SHA-384, SHA-512
    SHA1
    HMAC	SHA1, SHA2
    MD5

    References:

    1. https://www.wolfssl.com/wolfssl-asynchronous-intel-quickassist-support/

 

• • NXP LTC (KSDK): 
    

    AES–GCM	128, 192, 256 bit
    AES–CCM	128, 192, 256 bit
    AES–CBC	128, 192, 256 bit
    AES–ECB	128, 192, 256 bit
    AES–CTR	128, 192, 256 bit
    DES/3DES
    ECC	256 bit
    ECDSA	256 bit
    Curve25519	256 bit
    Ed25519	256 bit
    SHA2	SHA-256, SHA-384, SHA-512
    SHA1
    HMAC	SHA1, SHA2
    MD5

    References:

    1. https://www.wolfssl.com/docs/nxp/
    2. https://www.wolfssl.com/nxp-kinetis-k8x-ltc-support-for-pki-rsaecc-with-tls13/

 

• • NXP SE050: 
    

    ECC	256 bit
    ECDSA	256 bit
    Curve25519	256 bit
    Ed25519	256 bit
    RNG

    References:

    1. https://www.wolfssl.com/ssltls-support-nxp-se050-wolfssl/
    2. https://www.wolfssl.com/wolfssl-nxp-se050-support-update/
    3. https://www.wolfssl.com/wolfssl-support-nxp-se050-scp03/
    4. https://www.wolfssl.com/wolfssl-nxp-se050-support-benchmarks/

 

• • CAAM: NXP i.MX6, i.MX7, and i.MX 8 
    

    AES–GCM	128, 192, 256 bits
    AES–CCM	128, 192, 256 bits
    AES–CTR	128, 192, 256 bits
    AES–XTS	128, 192, 256 bits
    ECC
    Curve25519	256 bit
    SHA2	SHA-256, SHA-384, SHA-512
    SHA1
    HMAC	SHA1, SHA2

    References:

    1. https://www.wolfssl.com/caam-supported-wolfssl/
    2. https://www.wolfssl.com/docs/benchmarks/#nxp_i.mx6
    3. https://www.wolfssl.com/mx6-caam-integrity-os/
    4. https://www.wolfssl.com/caamqnxi-mx8/

 

• • STMicroeletronics STM32 Public Key Accelerator (on WB55, H7): 
    

    AES–CBC	128, 192, 256 bit
    SHA2	SHA-224, SHA-256
    ECC	256 bit (NIST-P256)
    RNG

    References:

    1. https://www.wolfssl.com/support-stm32_pka-accelerator/

 

• • Silicon Labs EFR32: 
    

    AES–GCM	128, 192, 256 bit
    AES–CCM	128, 192, 256 bit
    AES–CBC	128, 192, 256 bit
    SHA2	SHA-224, SHA-256
    SHA1
    ECC	256 bit
    ECDSA	256 bit
    RNG

    References:

    1. https://www.wolfssl.com/wolfssl-adds-silicon-labs-hardware-acceleration-support/

 

• • Renesas RX65N and RX72N: 
    

    AES–GCM	128, 256 bit
    AES–CBC	128, 256 bit
    SHA2	SHA-256, SHA-512
    SHA1
    HMAC	SHA1, SHA2
    RNG

    References:

    1. https://www.wolfssl.com/docs/renesas/
    2. https://www.wolfssl.com/docs/wolfssl-renesas-tsip/
    3. https://www.wolfssl.com/support-renesas-tsip-v1-13-rx72n/
    4. https://www.wolfssl.com/docs/benchmarks/#renesasrx65n

 

• • Renesas Synergy DK-S7G2 
    

    RSA	2048 bits
    AES–CBC	128 bit
    SHA2	SHA-256
    SHA1
    HMAC	SHA1, SHA2
    ECC	256 bit
    ECDSA	256 bit

    References:

    1. https://www.wolfssl.com/docs/benchmarks/#renesasrx71m

 

• • Cypress PSoC6 (32-bit Arm Cortex M4) 
    

    SHA2	SHA-256, SHA-512
    ECC	Supports up to NIST P-521

 

• • Xilinx Versal: 
    

    AES–GCM	256 bit
    RSA	2048 bit
    ECC	NIST P-384, P-521
    SHA3	SHA-384
    RNG

    References:

    1. https://www.wolfssl.com/versal-support/

 

• • Xilinx Zynq UltraScale+ MPSoC 
    

    AES–GCM	256 bit
    RSA	2048, 4096 bits
    SHA3	SHA-384

    References:

    1. https://www.wolfssl.com/wolfssl-running-xilinx-versal-hardware-encryption/
    2. https://docs.xilinx.com/v/u/en-US/wp512-accel-crypto

 

• MAXQ1065 and MAXQ1080: 
  

  AES–GCM	128, 192, 256 bit
  AES–CCM	128, 192, 256 bit
  ECC	NIST-P256
  SHA2	SHA-256

  References:

  1. https://www.wolfssl.com/support-maxq1065-wolfssl/

Do you have a platform requiring hardware cryptographic support that isn’t on our list, or are you curious about benchmarking? Please contact us at facts@wolfSSL.com, or call us at +1 425 245 8247 with the details of your platform and we will be glad to help you! Also, check out our wolfSSL and wolfCrypt benchmark page.

 

Download wolfSSL