Latest Posts

  • uncategorized fips

    FIPS-Certified WireGuard: Bringing wolfCrypt into the VPN Solution

    • shizuka
    As WireGuard continues to grow in popularity for its simplicity and efficiency in VPN deployments, security-conscious organizations are increasingly demanding solutions that adhere to stringent security standards, such as the Federal Information Processing Standard (FIPS 140-3). FIPS certification is a key requirement for governmental agencies and industries like healthcare and...
    Read more
  • wolssl

    Deprecation and Removal of TLS 1.0 / 1.1 Support from wolfSSL

    • shizuka
    As part of our quality control and review process, wolfSSL is planning removal of obsolete and deprecated TLS protocol support from our mainline TLS library. TLS 1.0 and 1.1 were introduced in 1999 and 2006 respectively, and both versions were formally deprecated by RFC 8996 in 2021. As noted in...
    Read more
  • uncategorized wolfhsm

    Post-Quantum wolfHSM on Aurix Tricore

    • shizuka
    The title says it all!! If you have been paying any attention at all to us here at wolfSSL, you will know that we are very proud of our wolfHSM product that already runs on the Aurix Tricore. What we have not been focusing on is the post-quantum algorithms that...
    Read more
  • uncategorized wolfssh

    wolfSSH with X.509 Certificates

    • shizuka
    Did you know wolfSSH can use X.509 certificates in place of SSH public keys? wolfSSH supports RFC 6187, “X.509v3 Certificates for Secure Shell Authentication”. This uses wolfSSL’s certificate management for TLS, so the certificates may be checked against CRLs and OCSP.
    Read more
  • uncategorized fips

    FIPS vs FedRAMP Compliance and Requirements

    • shizuka
    The wolfSSL team has noticed an uptick in questions about FedRAMP requirements. Today, we want to cover the differences between FIPS and FedRAMP. FIPS: The Federal Information Processing Standards (FIPS) stipulate security requirements for cryptographic modules, which wolfSSL Inc. meets with our wolfCrypt FIPS module. NIST and the CMVP then...
    Read more
  • uncategorized wolssl

    Introducing rustls-wolfcrypt-provider: wolfCrypt for Rustls

    • shizuka
    rustls-wolfcrypt-provider integrates the wolfCrypt cryptographic library as a backend for Rustls, allowing developers to use wolfCrypt’s secure cryptographic functions with Rustls’ modern TLS stack. Currently in alpha, this library offers flexibility for those needing an alternative crypto provider, especially for projects requiring FIPS 140-3 readiness. Other reasons to consider wolfCrypt...
    Read more
  • uncategorized wolssl

    Strengthening RSA default minimum to 2048 bits

    • shizuka
    wolfSSL helps make the internet secure. Part of this task is continually updating our default settings to keep up with adversarial advancements. A recent article detailed the use of default RSA key sizes by an IoT manufacturer, which resulted in a 512 bit key being used for authentication. “The factoring...
    Read more