Latest Posts

  • uncategorized

    We are happy to announce the release of wolfSSL version 3.3.0

    • wolfssladmin
    CyaSSL version 3.3.0 offers: • Secure countermeasures for Handshake message duplicates, CHANGE CIPHER without FINISHED, and fast forward attempts added to our source code.  Thanks to Karthikeyan Bhargavan from the Prosecco team at INRIA Paris-Rocquencourt for the report.  This is an important fix and all users should update! • Complete...
    Read more
  • uncategorized

    Case Study: wolfSSL Secures INSTEON Hub for the Connected Home

    • wolfssladmin
    INSTEON is leading the way in the field of home automation and control technology with a line of products that include a wide range of smart home devices such as lighting, motion detectors, and security systems. All INSTEON products can be centrally accessed through the Hub, a product that has...
    Read more
  • uncategorized

    wolfSSL and PicoTCP

    • wolfssladmin
    The next release of CyaSSL will have official support for the PicoTCP TCP/IP stack. wolfSSL has been working closely with the developers at TASS to add out-of-the-box support for this new, lightweight, and dual-licensed TCP/IP stack - making it easier to secure Internet of Things devices running on top of...
    Read more
  • uncategorized

    Deprecating SSL 3.0 from wolfSSL

    • wolfssladmin
    Hi! We’ve been telegraphing our plans to drop support for SSL 3.0 for the last year. With the emergence of the POODLE breach, we’ve decided to accelerate our plan. Over the coming weeks and months, we’ll be doing the following:1. Disabling SSL 3.0 by default at runtime.2. Disabling our SSL...
    Read more
  • uncategorized

    POODLE (An SSL 3.0 Vulnerability)

    • wolfssladmin
    SSL, the predecessor to TLS, reached version 3.0 before changing names to TLS. TLS versions currently defined include TLS 1.0, 1.1, and 1.2, with the 1.3 specification still being worked out.“Padding Oracle On Downgraded Legacy Encryption” Bug (POODLE) was disclosed on October 14th, 2014 and allows an attacker to read...
    Read more
  • uncategorized

    Beta Testing curve25519

    • wolfssladmin
    Implementation of curve25519 is to the point where it is going through a testing cycle. We are looking for interested beta testers and cryptography enthusiasts who wish to test out just how fast it can be. If interested in getting the source code for the curve25519 implementation, contact us at facts@wolfssl.com.
    Read more
  • uncategorized

    Secure Renegotiation Support Coming Soon to wolfSSL

    • wolfssladmin
    Secure Renegotiation will allow for a server to differentiate between an initial connection and a renegotiation, protecting against “man-in-the-middle” attacks during renegotiations. “Secure Socket Layer (SSL) and Transport Layer Security (TLS) renegotiation are vulnerable to an attack in which the attacker forms a TLS connection with the target server, injects...
    Read more
  • uncategorized

    wolfSSL Now Provides a Beta SCEP Implementation

    • wolfssladmin
    Simple Certificate Enrollment Protocol, better known as SCEP, is a way to simplify certificate handling for everyday users. This Public Key Infrastructure communication protocol is designed to enable certificate management and certificate/CRL queries within a closed network. According to the Internet Engineering Task Force, SCEP uses PKCS#7 and PKCS#1 over...
    Read more
  • uncategorized

    Benchmarks of curve25519

    • wolfssladmin
    Preliminary benchmarks on the upcoming curve25519 implementation display why it is listed as being a speed record breaker. On average, a TLS connection using curve25519 with RSA signature, 128 bit AES and SHA is approximately 15 percent faster than when using NIST curves with the same suite. When using the...
    Read more
  • uncategorized

    wolfSSL 3.2.0 Released

    • wolfssladmin
    CyaSSL version 3.2.0 has been released and is now available for download from the wolfSSL website.  This release includes bug fixes and several new features which we think will be beneficial to our user and customer base.  Fixes and features include:- ChaCha20 and Poly1305 crypto and suites- Small stack improvements...
    Read more