Latest Posts

  • uncategorized

    wolfCrypt FIPS Certificate #3389

    The National Institute of Standards and Technology (NIST) has completed the validation of the wolfCrypt module version 4 for an updated Federal Information and Processing Standards (FIPS) 140-2 certificate in addition to its previous FIPS 140-2 certificate. This new certificate includes updated and more secure algorithms added to the wolfCrypt...
    Read more
  • uncategorized

    TLS 1.3 Performance Analysis – Throughput

    Some interesting results were found when comparing the throughput of TLS 1.2 and TLS 1.3 using an assembly optimized wolfSSL – some good, some bad. This is the last of the blogs discussing the performance differences observed between TLS 1.2 and TLS 1.3 in wolfSSL and how to make the...
    Read more
  • uncategorized

    wolfSSL Renesas Support

    TLS 1.3 has some significant changes from TLS 1.2 in the ordering of handshake messages and this impacts performance. This is the fifth part of six blogs discussing the performance differences observed between TLS 1.2 and TLS 1.3 in wolfSSL and how to make the most of them in your...
    Read more
  • uncategorized

    wolfSSL Apache Mynewt port

    The wolfSSL embedded SSL/TLS library features many different ports, including one for Apache Mynewt. Apache Mynewt is a Real-Time Operating System (RTOS) that is used to build, deploy, and securely manage billions of devices. It is designed for IoT devices that have limited memory and storage and need to run...
    Read more
  • uncategorized

    wolfSSL Apache Port Coming Soon!

    wolfSSL provides the wolfSSL embedded SSL/TLS library, which is a fast, secure, and highly portable implementation of the SSL/TLS protocols. As part of being highly portable, the wolfSSL library is frequently being ported to various other software modules and devices for users to easily implement wolfSSL’s features. One of these...
    Read more
  • uncategorized

    wolfSSL and the Zombie POODLE and GOLDENDOODLE Attacks

    The wolfSSL library is NOT vulnerable to these attacks, thanks to previous fixes we’ve made and our extensive testing. These attacks were presented by Craig Young at BlackHat Asia 3/29/2019 (slides). Both attacks target the MAC and Padding used for TLS v1.2 with AES CBC cipher suites. TLS padding occurs...
    Read more
  • uncategorized

    TLS 1.3 Performance Analysis – Server Pre-Generation

    TLS 1.3 has some significant changes from TLS 1.2 that are targeted at performance. This is the fourth part of six blogs discussing the performance differences observed between TLS 1.2 and TLS 1.3 in wolfSSL and how to make the most of them in your applications. This blog discusses the...
    Read more
  • uncategorized

    TLS 1.3 Performance Analysis – Pre-Shared Key (PSK)

    TLS 1.3 has a different handshake flow when using pre-shared keys and this impacts performance. This is the third part of six blogs discussing the performance differences observed between TLS 1.2 and TLS 1.3 in wolfSSL and how to make the most of them in your applications. This blog discusses...
    Read more