Latest Posts

  • uncategorized

    Deprecation of FIPS v1

    • kajal
    Here at wolfSSL, we have been supporting your FIPS needs for several years now with our FIPS Ready, certificate #2425 and certificate #3389 source bundles.  This support is going to continue with the soon to be granted FIPS 140-3 certificate. With the new certificate coming soon, we thought this might...
    Read more
  • uncategorized

    Top 10 wolfSSL Library Configurations

    • kajal
    Here at wolfSSL, we strive to support our customers’ needs for customization and finding the right trade-offs. The following table is a list of the top 10 things you can do with wolfSSL’s configuration flags.
    Read more
  • uncategorized

    wolfSSL provider support for PKCS11

    • kajal
    We now support wolfCrypt as a PKCS11 provider for applications to consume. The new wolfPKCS11 library adds a PKCS11 layer on top of the wolfCrypt API’s to enable customers who wish to standardize on an API interface or may already have developed code against PKCS #11.
    Read more
  • uncategorized

    wolfCLU 'ca' Command Added

    • kajal
    wolfCLU (wolfSSL command line utility) has seen many feature additions! One of the features added was support for the command ‘ca’. This command now can handle basic conf. files for use with signing certificates. It is useful in projects to make a quick certificate with a given CA while avoiding...
    Read more
  • uncategorized

    What are the Advantages of wolfTPM?

    • kajal
    At wolfSSL, we have been developing a TPM stack with customers for many years called wolfTPM, a portable, open-source TPM stack with backward API compatibility, designed for embedded use. It is highly portable, and has native support for Linux and Windows. RTOS and bare metal environments can take advantage of...
    Read more
  • uncategorized

    FIPS 140-3 and the TLS KDF

    • kajal
    There has been a little turmoil between the CAVP and the FIPS community regarding the TLS KDF. The CAVP deprecated testing of the kdf-component-tls-1.0 at the beginning of the year. The community wasn’t ready and it was temporarily un-deprecated. wolfSSL and our wolfCrypt cryptography library are ready for the transition...
    Read more
  • uncategorized

    wolfCrypt as an Engine for OpenSSL

    • kajal
    As many people know, the OpenSSL project is struggling with FIPS. As of October 2020, OpenSSL has no active FIPS 140 validation. OpenSSL had plans to restore it’s FIPS validation with OpenSSL 3.0, however, they ran into significant delays, and since FIPS 140-2 testing ends September 2021, OpenSSL ultimately decided...
    Read more