The wolfMQTT client library “mqttclient” example demonstrates securely connecting over TLS provided by wolfSSL. We set up a HiveMQ Cloud cluster that can be used for testing. The HiveMQ Cloud broker uses the Server Name Indicator (SNI) extension for TLS client authentication, which is specified using the `-S ` option. The example is located in […]
Read MoreMore TagCategory: Uncategorized
Embedded SSH client with TPM protected keys
We are adding hardware security to wolfSSH to meet the rising security requirements for connected systems. Thanks to the widely available Trusted Platform Module (TPM) and our portable wolfTPM library, wolfSSH can have the user’s private SSH key stored and used directly from a hardware security module. This way the private key material is never […]
Read MoreMore TagIntegration update: wolfSSL is the Secure Socket Solution for Qt
The QSslSocket class in Qt makes it easy to add encryption to your application. wolfSSL makes it secure! The wolfSSL embedded SSL/TLS library is a lightweight SSL/TLS library written in ANSI C and targeted for embedded, RTOS, and resource-constrained environments – primarily because of its small size, speed, and feature set. It is commonly used […]
Read MoreMore TagcURL Security Advisories
The 200th curl release found 3 major security advisories from the curl bug-bounty program. These are the advisories: CVE-2021-22901: TLS session caching disaster This is a Use-After-Free in the OpenSSL backend code that in the absolutely worst case can lead to an RCE, a Remote Code Execution. The flaw is reasonably recently added and it’s very […]
Read MoreMore TagU-Boot with wolfTPM
We are integrating wolfTPM into U-Boot. This will extend the TPM 2.0 capabilities in U-Boot to include signature verification and measured boot. For many platforms we can replace U-Boot such as on the Xilinx UltraScale+ MPSoC. Our wolfBoot allows many features including: * Partition signature verification using ED25519, RSA and ECC * Encryption of partitions […]
Read MoreMore TagwolfSentry Operating Environments
Our first preview release of wolfSentry, the IDPS (Intrusion Detection and Prevention System) for embedded and IoT systems, has platform support for Raspberry Pi, STM32 with CubeMX, Atmel ASF and Barebox. As well as native support for Microsoft Windows and Linux. Here at wolfSSL we are always striving to be better so we would love […]
Read MoreMore TagwolfCrypt FIPS Operating Environments
wolfSSL fans! Do you like FIPS? Do you like virtual machines? Guess what. wolfSSL`s crypto library, wolfCrypt, is validated for FIPS 140-2 and in the process of being one of the first cryptography libraries to be validated for FIPS 140-3. As wolfCrypt is commonly used in standard operating environments because of its royalty-free pricing and […]
Read MoreMore TagstrongSwan + wolfSSL + FIPS!
As some may be aware, wolfSSL added support for strongSwan in April of 2019. The upstream commit can be reviewed here: https://github.com/strongswan/strongswan/pull/133 Users can test the latest development master of wolfSSL with the latest version of strongSwan using the following setup: wolfSSL Build and Installation Steps $ git clone https://github.com/wolfSSL/wolfssl.git $ cd wolfssl $ ./autogen.sh […]
Read MoreMore TagwolfSSL devkitPro Support
devkitPro is a set of tool chains for compiling to gaming platforms. This includes the Nintendo Switch, 3DS, Wii, and Gamecube. If you need cryptographic or SSL/TLS capabilities in your games then wolfSSL has support for compiling with devkitPro. wolfSSL is a very lightweight and fast SSL/TLS library that will fit perfectly in a constrained […]
Read MoreMore TagwolfSSL Asynchronous Release v4.7.0
The wolfSSL / wolfCrypt libraries support asynchronous (non-blocking) crypto using hardware acceleration with the Intel QuickAssist and Cavium Nitrox III/V adapters. These are PCIe devices that accelerate crypto operations. For server platforms requiring high connection rates and throughput this allows greatly increased performance. For some performance numbers see this page: https://www.wolfssl.com/docs/intel-quickassist/ Release v4.7.0 of wolfSSL Async […]
Read MoreMore Tag