Latest Posts

  • uncategorized

    More Flexible Example Applications

    • wolfssladmin
    You may have noticed that with our most recent release of the wolfSSL embedded SSL library (2.3.0), we have made our example client and server applications more flexible and easier to use. These updated applications - client (./examples/client/client) and server (./examples/server/server) - now offer a variety of command line options...
    Read more
  • uncategorized

    The CRIME attack and wolfSSL embedded SSL

    • wolfssladmin
    The CRIME attack has been in the news recently, and some of our users have been asking about it.  The short version of responding to the attack is simple:  disable TLS compression.  In wolfSSL, compression is disabled by default.  The Tor project has posted an excellent explanation of the attack...
    Read more
  • uncategorized

    Avoid BEAST attack when using CyaSSL lightweight SSL implementation

    • wolfssladmin
    Hi!  To our users concerned about the following security advisory:  http://www.securelist.com/en/advisories/50605 (as of 26 March 2018 at 9:28am MDT, this link no longer works and has no alternative), it is a vulnerability related specifically to SSL 3.0 and TLS 1.0.  When using CyaSSL, you can avoid this vulnerability using one...
    Read more
  • uncategorized

    wolfSSL is Now Available in the MacPorts Project

    • wolfssladmin
    If you are a user of the popular MacPorts project on OS X, you may be happy to hear that the wolfSSL embedded SSL library is now available as a MacPorts package. If you are not familiar with the MacPorts Project, a brief summary from their website does an excellent...
    Read more
  • uncategorized

    Using Crypto Algorithms Separately from CTaoCrypt

    • wolfssladmin
    As you may know, CTaoCrypt is the underlying cryptography library used by the wolfSSL embedded SSL library. We’ve had several users choose to use CTaoCrypt’s crypto algorithms because they are easy to isolate and use independently of the library itself. For example, if you need to use MD5 in your...
    Read more
  • uncategorized

    yaSSL Embedded Web Server 1.0 is Now Available

    • wolfssladmin
    The third release of the yaSSL Embedded Web Server is now available for download!  Changes in this release include bug fixes, updated wolfSSL support, iOS (Apple TV) build support, better Windows build support, CGI and SSI extension pattern matching and more.The yaSSL Embedded Web Server is focused on being small,...
    Read more
  • uncategorized

    wolfSSL 2.3.0 is Now Available

    • wolfssladmin
    Version 2.3.0 of the wolfSSL embedded SSL/TLS library has been released and is now available for download.  This release contains bug fixes and new features. Changes include the following (with details and comments for each listed below):- AES-GCM crypto and cipher suites- “make test” cipher suite checks- Subject AltName processing-...
    Read more
  • uncategorized

    wolfSSL Now Supports AES with GCM

    • wolfssladmin
    We have added the Galois/Counter Mode for AES to wolfSSL. It adds an Authenticated Data with Associated Data (AEAD) cipher to TLS v1.2 where the cipher provides its own message authentication. The following cipher suites are available:* TLS_DHE_RSA_WITH_AES_256_GCM_SHA384* TLS_DHE_RSA_WITH_AES_128_GCM_SHA256* TLS_RSA_WITH_AES_256_GCM_SHA384* TLS_RSA_WITH_AES_128_GCM_SHA256* TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384* TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384* TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256* TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256* TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384* TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384* TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256* TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256We offer...
    Read more