Latest Posts

  • uncategorized

    wolfSSL now has lwIP support

    • wolfssladmin
    The wolfSSL (formerly CyaSSL) embedded SSL library supports lwIP, the light weight internet protocol implementation, out of the box.  The user merely needs to define WOLFSSL_LWIP or uncomment the line /* #define WOLFSSL_LWIP */ in os_settings.h to use wolfSSL with lwIP.  The focus of lwIP is to reduce RAM usage...
    Read more
  • uncategorized

    Intro to PKCS #5: Password-Based Cryptography Specification

    • wolfssladmin
    Our third post in our PKCS series, we will be looking at PKCS  #5. PKCS #5 is the Password-Based Cryptography Specification and is currently defined by version 2.0 of the specification. It is defined in RFC 2898 http://tools.ietf.org/html/rfc2898. It applies a pseudorandom function, such as a cryptographic hash, cipher, or HMAC to...
    Read more
  • uncategorized

    What is a Stream Cipher?

    • wolfssladmin
    A stream cipher encrypts plaintext messages by applying an encryption algorithm with a pseudorandom cipher digit stream (keystream). Each bit of the message is encrypted one by one with the corresponding keystream digit. Stream ciphers are typically used in cases where speed and simplicity are both requirements. If a 128...
    Read more
  • uncategorized

    When to use Pre Shared Key (PSK) Cipher Suites

    • wolfssladmin
    PSK cipher suites are a superb choice in low resource environments where both ends of the connection can be controlled. With PSK, each side of the connection has an already agreed upon key to use rather than agreeing on one during the TLS handshake. This reduces resource consumption for each...
    Read more
  • uncategorized

    Differences between TLS 1.2 and TLS 1.3 (#TLS13)

    • wolfssladmin
    With the release of TLS 1.3, there are promises of enhanced security and speed. But how exactly do the changes from TLS 1.2 to TLS 1.3 cause these improvements? The following is a list of differences between TLS 1.2 and 1.3 that shows how the improvements are achieved.
    Read more
  • uncategorized

    What is a Block Cipher?

    • wolfssladmin
    A block cipher is an encryption method that applies a deterministic algorithm along with a symmetric key to encrypt a block of text, rather than encrypting one bit at a time as in stream ciphers. For example, a common block cipher, AES, encrypts 128 bit blocks with a key of...
    Read more
  • uncategorized

    A Comparison of Differences in TLS 1.1 and TLS 1.2

    • wolfssladmin
    As stated in the TLS 1.1 and 1.2 protocol definitions (RFC 4346, RFC 5246), “The primary goal of the TLS protocol is to provide privacy and data integrity between two communicating applications.” TLS 1.2 is an improvement to the TLS 1.1 standard, but how exactly do they differ? What was...
    Read more
  • uncategorized

    Differences between SSL and TLS Protocol Versions (#TLS13)

    • wolfssladmin
    Have you heard talk about SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2, and TLS 1.3 but never really knew the differences between the different versions? Secure Socket Layer (SSL) and Transport Security Layer (TLS) are both cryptographic protocols which provide secure communication over networks. These different versions are all...
    Read more
  • uncategorized

    TLS 1.3 Draft 28 Support in wolfSSL (#TLS13)

    • wolfssladmin
    As you may have noticed, we released version 3.15.0 of wolfSSL. One of the features in this release was TLS 1.3 Draft 28 support!  Draft 28 is the latest version of the TLS 1.3 specification, and can be enabled in wolfSSL at configure time by using the “–enable-tls13” build option: ```...
    Read more
  • uncategorized

    wolfSSL and ROHNP

    • wolfssladmin
    wolfSSL is one of over a dozen vendors mentioned in the recent Technical Advisory “ROHNP” by author Ryan Keegan. Versions of wolfSSL prior to 3.15.3 were vulnerable to a Key Extraction Side Channel Attack. wolfSSL v3.15.3 which is protected against these attacks and has other improvements is available for download...
    Read more