Latest Posts

  • uncategorized

    Rust Crate for Post-Quantum TLS 1.3 and wolfSSL

    Are you on the bleeding edge of software development and cryptographic protocols? Then you’ll appreciate the work that our friends at ExpressVPN have done by creating a rust crate for wolfSSL with bindings into our API.  They have even created a special feature flag called “postquantum” which enables our integration...
    Read more
  • uncategorized

    wolfSSL: Hardened By Default

    In cryptography when we talk about hardening a library, we mean enabling resistance to timing attacks and cache attacks, using RSA blinding and protecting against glitching. Enabling and Disabling Our code has many related macros which can be controlled via configure script flags such as the harden flag and maxstrength...
    Read more
  • uncategorized

    Heard of NuttX?

    Heard of NuttX?  Fresh out of the Apache incubator, it’s a small RTOS with a focus on POSIX and ANSI standards compliance, scales from 8 to 64-bit microcontrollers, is extensively documented, ported to many platforms, and is very easy to get started with!  Here at wolfSSL we are hard at...
    Read more
  • uncategorized

    wolfSSH v1.4.12 Release

    wolfSSL are proud to announce a new incremental update to wolfSSH: v1.4.12! In this release, we have wolfSSHD running. It seamlessly fits in where other SSHDs are, and is able to parse and make use of existing sshd_config files that are in place. We are also proud to announce that...
    Read more
  • uncategorized

    wolfSSL 5.5.4 Release!

    Merry Christmas! The Christmas release of wolfSSL is here, version 5.5.4! This includes some minor feature additions, QUIC related changes for HAProxy use, port to the MAXQ hardware, improvements in performance, as well as additional enhancements and fixes. In this development cycle we also did testing of using wolfSSL with...
    Read more
  • uncategorized

    Encrypted Client Hello (ECH) now supported in wolfSSL

    ECH (Encrypted Client Hello) is a draft extension for TLS 1.3 that enables a client to encrypt its client_hello in the TLS handshake to prevent leaking sensitive metadata that is sent in the clear during the normal TLS handshake. ECH was originally proposed as ESNI (Encrypted Server Name Indication), since...
    Read more