Latest Posts

  • uncategorized wolssl

    Skipping the Cookie Exchange in DTLS 1.3

    • shizuka
    wolfSSL 5.6.6 introduces the option for DTLS 1.3 servers to skip the cookie exchange on a session resumption. The cookie exchange is a security mechanism employed during the resumption of a DTLS 1.3 session. When a client wants to resume a previous DTLS 1.3 session, it sends a session ticket...
    Read more
  • uncategorized

    Overview of Testing in wolfSSL

    • shizuka
    The security of wolfSSL products is always on the wolfSSL team’s mind and holds high importance. Conducting regular, diligent, and well-planned testing helps maintain wolfSSL’s robustness and security. The wolfSSL team strives to write and maintain clean, readable, and understandable code.
    Read more
  • uncategorized wolssl

    wolfSSL Adds Support for 0.5-RTT Data in (D)TLS 1.3

    • shizuka
    (D)TLS 1.3 support for 0.5-RTT (round trip time) data has been introduced to wolfSSL in the latest release (5.6.6). 0.5-RTT data is an optimization in (D)TLS 1.3 that significantly reduces latency and improves overall performance of application data. The full handshake requires two full round trips to start sending data...
    Read more
  • uncategorized

    Testing For Your Use Cases

    • shizuka
    Here at wolfSSL, we love to tout that we have the best tested cryptography library in the world and we stand by that statement 100%. You can even have a look at some of the unit tests in all our products. Simply build any one of our products and execute...
    Read more
  • uncategorized wolssl

    Handshake Message Coalescing Vulnerability

    • shizuka
    wolfSSL prior to version 5.6.6 had a vulnerability where the (D)TLS key boundaries were not properly checked. As a result, it was possible to combine (D)TLS messages using different keys into one (D)TLS record. The most extreme edge case is that, in (D)TLS 1.3, it was possible that an unencrypted...
    Read more
  • uncategorized wolfboot

    wolfBoot v2.0.0 intel x86_64 support

    • shizuka
    wolfBoot v2.0.0 introduced support for the Intel x86-64 bit architecture by leveraging the Intel Firmware Support Package (Intel FSP) and several new exciting and interesting features: TPM integration, Multiboot2/ELF support, PCI support, AHCI support, SATA security features, and others. On Intel x86_64, wolfBoot uses a dual stage design. In the...
    Read more
  • uncategorized wolssl

    Sniffing TLS Traffic

    • shizuka
    Do you have a need to capture and/or analyze TLS traffic? The wolfSSL library includes a useful tool that you can leverage. The wolfSSL sniffer can be used to capture TLS packets and even decrypt them when at least one of the keys is known. This can be done with...
    Read more