FIPS 140-2 requires the use of validated cryptography in the security systems implemented by federal agencies to protect sensitive information. The wolfCrypt Module is a comprehensive suite of FIPS Approved algorithms. All key sizes and modes have been implemented to allow flexibility and efficiency. The National Institute of Standards and Technology (NIST) is sending FIPS […]
Read MoreMore TagCategory: Uncategorized
wolfSSL Cisco cjose Port
The wolfSSL library has added support for the cisco/cjose library in version 4.4.0. cjose implements Javascript Object Signing and Encryption (JOSE) in C/C++. JOSE is a framework that allows parties to exchange transfer claims in a secure way. The cjose library has been ported to work with wolfSSL, the best tested crypto library on the […]
Read MoreMore TagwolfSSL 4.7.0 has added support for S/MIME!
S/MIME is short for Secure/Multipurpose Internet Mail Extensions, a standard for public key encryption and signing of MIME data. The S/MIME standard allows you to sign, authenticate and encrypt plaintext MIME messages. It is commonly used in email. wolfSSL now supports both “enveloped data” (application/pkcs7-mime) and “detached signature” (multipart/signed) messages. To enable S/MIME support in […]
Read MoreMore TagwolfSSL Xilinx Support
wolfSSL supports Xilinx SoCs and FPGAs. The wolfSSL embedded SSL/TLS library can be used with FPGAs which use the MicroBlaze CPU and/or Zynq and Zynq UltraScale+ SoCs. Improved performance speeds with using the hardware crpyto can be seen. Increasing AES-GCM, RSA, and SHA3 operations performance. In addition to the performance gained a user also gets the additional security the hardware […]
Read MoreMore TagBuilding Qt with wolfSSL Support
Did you know that you can build Qt 5.12 and 5.13 against the wolfSSL embedded SSL/TLS library instead of the default OpenSSL backend? Using wolfSSL as a TLS provider in Qt can have many advantages, depending on application and industry. Some of these may include: Progressive TLS protocol support (up to TLS 1.3) Smaller footprint size […]
Read MoreMore TagDo you need to secure your ARINC 653?
Did you know that wolfSSL is OS and architecture agnostic, and it can run on bare metal? Did you know that we have DO-178C artifacts for our wolfCrypt software? The DO-178C wolfCrypt product which is a cryptographic foundation for secure boot and secure firmware update has been integrated and tested with various operating systems including […]
Read MoreMore TagwolfSSL DTLS Bandwidth Optimization
wolfSSL provides a robust and secure DTLS 1.2 implementation. During the handshake process, wolfSSL will re-send its previous flight of messages in the following circumstances: a network timeout has occurred waiting on data to arrive for processing the last message of the peer’s current flight has been received out of order a duplicate of the […]
Read MoreMore TagIntroducing wolfSentry – An Embedded IDPS
wolfSSL has a major new product in development — wolfSentry, the universal, dynamic, embedded IDPS (intrusion detection and prevention system). At a high level, wolfSentry is a dynamically configurable logic hub, arbitrarily associating user-defined events with user-defined actions, contextualized by connection attributes, tracking the evolution of the client-server relationship. At a low level, wolfSentry is […]
Read MoreMore TagRFC 5705: Keying Material Exporters for TLS
With the release of wolfSSL 4.7.0, we now support Keying Material Exporters for TLS as defined in RFC 5705! This new functionality allows applications to establish common secrets using the underlying (D)TLS connection. A popular project that makes use of exported keying material is OpenVPN (which wolfSSL supports!). It uses the user provided label, in […]
Read MoreMore TagwolfSSL, Session Tickets, TLS 1.3 and TLS 1.2
At wolfSSL we have found more and more customers choosing to use TLS 1.3. That’s great! More businesses are taking advantage of the improved security in the new protocol. These customers are finding that they need to use session tickets for resumption for the first time in their applications. In the latest release of wolfSSL, […]
Read MoreMore Tag