Latest Posts

  • uncategorized

    wolfSSL Embraces ASCON Lightweight Cryptography

    • kajal
    The cryptography world is abuzz with the new proposed NIST standard, Ascon. Earlier this year, NIST selected the Ascon family “ for lightweight cryptography applications as it meets the needs of most use cases where lightweight cryptography is required ”. More details can be found at the NIST News Update....
    Read more
  • uncategorized

    OpenSSL 1.1.1 EOL

    • kajal
    Have you heard the news from the OpenSSL blog?  If you are using the 1.1.1 branch of releases of OpenSSL, come September 11, 2023, there will be no more updates. You can get the details here: 
    Read more
  • uncategorized

    DTLS 1.2 and 1.3 Stateless ClientHello Parsing

    • chris
    wolfSSL implements support for both client side and server side DTLS. The server side requires extra attention when it comes to Denial-of-Service (DoS) attacks. One way to mitigate DoS on DTLS servers is to operate statelessly until a cookie exchange is completed with the peer. The cookie exchange is implemented...
    Read more
  • uncategorized

    wolfSSL pthread_rwlock Support

    • chris
    wolfSSL uses mutexes for most locking synchronization. In release 5.6.0 we have added support for pthread_rwlock_t (https://github.com/wolfSSL/wolfssl/pull/5952 and https://github.com/wolfSSL/wolfssl/pull/6086). It is currently implemented in the session caching logic. This will speed up multi-threaded servers by allowing multiple threads to read from the cache simultaneously. We also recommend multi-threaded servers to...
    Read more
  • uncategorized

    wolfSSL Supported Open Source Projects

    • chris
    wolfSSL makes a great effort to support many different projects. We provide patches for projects to leverage our OpenSSL Compatibility Layer and work with maintainers to upstream support whenever possible. This blog is a list of currently supported open source projects. The support type denotes how wolfSSL is supported. “Patch”...
    Read more
  • uncategorized

    wolfSSL Release Version 5.6.0

    • kajal
    wolfSSL release version 5.6.0 is available now! A couple things to note with this release is that the new and improved ASN parsing, and generation, code is enabled by default now. Additionally we have the upcoming deprecation of –enable-heapmath which is scheduled to be removed by 2024.
    Read more
  • uncategorized

    wolfSSL and wpa_supplicant FIPS

    • kajal
    What is the difference in modes with wpa_supplicant using wolfSSL FIPS vs non FIPS? Some of the algorithms are restricted when using CONFIG_FIPS=y while building wpa_supplicant. This is not a limitation in wpa_supplicant or in wolfSSL, but is due to restrictions and guidelines put in place for FIPS. To help...
    Read more