Latest Posts

  • uncategorized

    What is the difference between AES and ECC?

    • shizuka
    AES (Advanced Encryption Standard) and ECC (Elliptic Curve Cryptography) are both cryptographic algorithms used for securing data, but they operate in different ways and serve different purposes: AES (Advanced Encryption Standard)
    Read more
  • uncategorized

    wolfCrypt JCE Provider and JNI Wrapper 1.6.0 Now Available

    • shizuka
    wolfCrypt JNI/JCE 1.6.0 is now available for download! wolfCrypt JNI/JCE provides Java-based applications with an easy way to use the native wolfCrypt cryptography library. The thin JNI wrapper can be used for direct JNI calls into native wolfCrypt, or the JCE provider (wolfJCE) can be registered as a Java Security...
    Read more
  • uncategorized

    Elevate Your Cybersecurity Skills: Master wolfSSL, DTLS 1.3, and FIPS with Comprehensive Training Videos

    • shizuka
    In today’s fast-paced world, staying ahead of the curve isn’t just advantageous—it’s essential. Continuous learning is key to personal and professional growth. At wolfSSL, we recognize this need, which is why we host webinars featuring tailored training courses for various skill levels. Our software engineers guide you through the fundamentals...
    Read more
  • uncategorized

    Join Our Live Webinar: Benchmarks with wolfSSL

    • shizuka
    Get excited for the upcoming webinar on ‘Benchmarks with wolfSSL,’ scheduled for May 16th at 10am PT. Led by wolfSSL Senior Software Engineer Jacob Barthelmeh, this session is set to be a deep dive into SSL/TLS performance optimization techniques.
    Read more
  • uncategorized

    wolfSSL JSSE Provider and JNI Wrapper 1.13.0 Now Available

    • shizuka
    wolfSSL JNI/JSSE 1.13.0 is now available for download! wolfSSL JNI/JSSE provides Java-based applications with an easy way to use the native wolfSSL SSL/TLS library. The thin JNI wrapper can be used for direct JNI calls into native wolfSSL, or the JSSE provider (wolfJSSE) can be registered as a Java Security...
    Read more
  • uncategorized wolfssh

    Vulnerability Disclosure: wolfSSH (CVE-2024-2873)

    • shizuka
    Affected Users: Anyone using wolfSSH server versions prior to release v1.4.17. Summary: It is possible for a malicious client to bypass user authentication when logging into a wolfSSH server. The wolfSSH server was not rigorous about checking the current state of the key exchange when handling channel open messages. wolfSSH’s...
    Read more
  • uncategorized wolfssh

    wolfSSH, SHA-1, and Configuration

    • shizuka
    wolfSSH is following the industry common practice of removing SHA-1 as a default configuration option. SHA-1 has been considered broken for a while now and shouldn’t be used for security purposes. RFC 8332 recognizes this for the SSH protocol and offers new RSA-based algorithms for signing authentication messages. In the...
    Read more
  • uncategorized wolfssh

    wolfSSH v1.4.17 Improvements and Fixes

    • shizuka
    wolfSSH has several useful features that were introduced in this most recent release. We have made wolfSSH builds for various systems better and easier. This includes changes to configuration scripts and modifying code to work with various compiler quirks. We’ve made building wolfSSH for Nucleus, QNX, Windows, and ESP32 builds...
    Read more