Latest Posts

  • uncategorized wolssl

    A slice of security for the Raspberry Pi Pico

    • shizuka
    Pretty much everyone knows what a Raspberry Pi board is, a very budget-friendly ARM board which runs Linux. What you might not know is that Raspberry Pi also created a very small, cheap, embedded ARM microcontroller range and development board as well. The board is known as the Raspberry Pi...
    Read more
  • uncategorized fips

    wolfCrypt FIPS 140-3 Operating Environments

    • shizuka
    wolfSSL’s crypto library, wolfCrypt, has obtained a 5-year FIPS 140-3 Validated Certificate #4718. wolfCrypt FIPS is known for its unmatched portability, runs on everything, and is highly optimized for dozens of hardware targets. WolfCrypt is commonly utilized in standard operating environments due to its royalty-free pricing model and exceptional support...
    Read more
  • uncategorized wolssl

    wolfSSL FIDO Compliance: Implementing FIDO Authentication Standards with wolfCrypt

    • shizuka
    wolfSSL FIDO Compliance As organizations move away from traditional password-based authentication, FIDO (Fast Identity Online) has emerged as one of the leading standards for strong authentication. wolfSSL is positioned to support this transition with our robust cryptography library, wolfCrypt, which implements many of the core algorithms required for FIDO compliance....
    Read more
  • uncategorized wolfclu

    Dilithium Support in wolfCLU

    • shizuka
    We have added the Dilithium command to wolfCLU. Dilithium (referred to as ML-DSA by NIST) is a post-quantam cryptography (PQC) algorithm for signing and verification. This blog post provides an overview of how to use the Dilithium command in wolfCLU.
    Read more
  • uncategorized wolssl

    Renesas RX TSIP with ECDSA and Crypto Callbacks

    • shizuka
    wolfSSL now has support for Renesas RX TSIP with ECDSA and crypto callbacks. This update provides broader flexibility and security for embedded systems with Renesas RX TSIP. Below is a summary of the key changes and updates that were added in PR# 7685: Key Changes and Features
    Read more
  • uncategorized wolssl

    wolfSSL Enhances PowerPC Support on Darwin

    • shizuka
    At wolfSSL, we are committed to supporting a wide range of platforms and architectures, ensuring that our SSL/TLS library can be used across various environments. One of the platforms we continue to support is PowerPC, both in 32-bit and 64-bit configurations. The latest updates to our PowerPC support primarily focus...
    Read more
  • uncategorized wolssl

    Extended Key Update for Transport Layer Security (TLS) 1.3

    • shizuka
    The Extended Key Update extension for (D)TLS 1.3 is a draft proposal for a new key update mechanism. (D)TLS 1.3 lacks perfect forward secrecy (PFS) for long-lived sessions, leaving them vulnerable to key exfiltration attacks. The proposed Extended Key Update mechanism addresses this by incorporating minimal key exchanges during key...
    Read more
  • uncategorized wolssl

    wolfSSL DTLS 1.2 Connection ID

    • shizuka
    wolfSSL release 5.7.4 includes an exciting new feature. We have implemented Connection ID (CID) support for DTLS 1.2 (RFC 9146). CID is a new feature in DTLS 1.2 that allows for better handling of connection migration. Without it, DTLS connections are tied to the IP 5-tuple making it unable to...
    Read more
  • uncategorized wolssl

    wolfSSL libspdm Support

    • shizuka
    wolfSSL has added support for libspdm 3.3.0. libspdm is the reference implementation of the DMTF’s Security Protocols and Data Models (SPDM specifications). The goal of the SPDM specifications is to provide device attestation and authentication as well as secure communication over any transport. Both wolfSSL and SPDM are designed to...
    Read more
  • uncategorized wolssl

    AI-automated fuzz testing uncovered a vulnerability in wolfSSL

    • shizuka
    Code Intelligence is happy to announce the discovery of a heap-based use-after-free vulnerability in wolfSSL, identified through a fuzz test automatically generated by an AI Test Agent. This marks another milestone in advancing automated security testing and demonstrates the power of AI-driven tools to improve software reliability and safety.
    Read more