Latest Posts

  • uncategorized

    wolfSSL Users SAFE from Recent OpenSSL Vulnerabilities (DH Primes, SSLv2)

    • wolfssladmin
    OpenSSL recently released patches for two vulnerabilities [1] - one related to how OpenSSL generates Diffie-Hellman prime values and the other that potentially allowed a malicious client to negotiate old SSLv2 ciphers that had been disabled on the server.  Since both of these are OpenSSL implementation vulnerabilities, wolfSSL users are...
    Read more
  • uncategorized

    wolfSSL adds NXP LPCXpresso IDE support and LPC18S37 reference project

    • wolfssladmin
    New in wolfSSL v3.8.0 we have added support for NXP’s LPCExpresso IDE and a reference project using the LPC18S37 on the OM13076 (LPCXpresso18S37) board. The reference project and README.md are located in the repository at:/IDE/LPCXPRESSOPlease contact us at facts@wolfssl.com or support@wolfssl.com with any questions about using the wolfSSL embedded SSL/TLS library...
    Read more
  • uncategorized

    wolfSSL with ChaCha20-Poly1305 Cipher Suites

    • wolfssladmin
    We have recently updated our ChaCha20-Poly1305 cipher suites. The ChaCha20-Poly1305 AEAD cipher suites are performant and use low amounts of memory, making it a good fit for IoT devices. This recent update allows for interoperability with the current OpenSSL, GnuTLS, and BoringSSL libraries when using ChaCha20-Poly1305 in a TLS connection...
    Read more
  • uncategorized

    wolfSSL Safe from SLOTH Attack

    • wolfssladmin
    A new year, another attack on TLS.  Karthikeyan Bhargavan and Gaetan Leurent of INRIA recently announced the new attack.  TLS 1.2 allows negotiation of the hashing algorithm used for signatures, typically to “upgrade” the hash to a higher security level.  Before TLS 1.2 a combination of MD5 and SHA1 were...
    Read more
  • uncategorized

    CES Big Story #3: Internet of Things Hyper Mania Hits Hard Reality - Security

    • wolfssladmin
    Everybody with a pulse is excited about the IoT, for all of the right reasons, but the market is starting to recognize the challenges of security. See the following EE Times article by John Curran of Accenture for a description of the security challenges of IoT: https://www.eetimes.com/author.asp?section_id=36&doc_id=1328584.Fortunately, wolfSSL is here...
    Read more
  • uncategorized

    IoT Security: Start with the Fundamentals

    • wolfssladmin
    Securing connected devices, including the IoT, is very important to us at wolfSSL. Larry Stefonic, CEO and Co-Founder of wolfSSL, recently published a guest post on the Xively blog that talks about the fundamentals of device security.This post includes commentary on securing the connection, device authentication, secure firmware updates, and...
    Read more
  • uncategorized

    wolfSSL with devkitPro

    • wolfssladmin
    wolfSSL has a port to devkitPro, giving an option to game developers to secure information with the embedded, lightweight, wolfSSL TLS/SSL library. The low memory footprint size of wolfSSL allows for efficient use of security while leaving plenty of room for the game itself. The low memory size of wolfSSL...
    Read more
  • uncategorized

    wolfSSL Roadmap for 2016

    • wolfssladmin
    Curious about new features and additions to wolfSSL technologies for the coming year?Some items on our current roadmap include: - Early TLS 1.3 adoption - Non-blocking Crypto support - DTLS robustness improvements - Curve25519 / Ed25519 integration at the TLS level - Increased IoT platforms - More resource reduction optionsIn...
    Read more
  • uncategorized

    wolfSSL Release Version 3.8.0

    • wolfssladmin
    wolfSSL version 3.8.0 has been released and is now available for download. The release has many new feature additions and some minor fixes. One of the new feature additions is that there have been APIs added for single shot hashing, creating a signature, and verifying a signature. This allows users...
    Read more