WolfSSL


wolfSSL
Developer(s)Todd Ouska
Initial releaseFebruary 19, 2006 (2006-02-19)[1]
Stable release
5.7.4[2] Edit this on Wikidata / 24 October 2024
Repositorygithub.com/wolfssl/wolfssl
Written inC
Operating systemMulti-platform
TypeCryptography library
LicenseGPL-2.0-or-later or proprietary[3]
Websitewww.wolfssl.com

wolfSSL is a small, portable, embedded SSL/TLS library targeted for use by embedded systems developers. It is an open source implementation of TLS (SSL 3.0, TLS 1.0, 1.1, 1.2, 1.3, and DTLS 1.0, 1.2, and 1.3) written in the C programming language. It includes SSL/TLS client libraries and an SSL/TLS server implementation as well as support for multiple APIs, including those defined by SSL and TLS. wolfSSL also includes an OpenSSL compatibility interface with the most commonly used OpenSSL functions.[4][5]

Platforms

wolfSSL is currently available for Microsoft Windows, Linux, macOS, Solaris, ESP32, ESP8266, Threadx, VxWorks, FreeBSD, NetBSD, OpenBSD, embedded Linux, Yocto Project, OpenEmbedded, WinCE, Haiku, OpenWrt, iPhone, Android, Wii, and GameCube through DevKitPro support, QNX, MontaVista, Tron variants, NonStop OS, OpenCL, Micrium's MicroC/OS-II, FreeRTOS, SafeRTOS, Freescale MQX, Nucleus, TinyOS, TI-RTOS, HP-UX, uTasker, uT-kernel, embOS, INtime, mbed, RIOT, CMSIS-RTOS, FROSTED, Green Hills INTEGRITY, Keil RTX, TOPPERS, PetaLinux, Apache Mynewt, and PikeOS.[6]

History

The genesis of wolfSSL dates to 2004. OpenSSL was available at the time, and was dual licensed under the OpenSSL License and the SSLeay license.[7] yaSSL, alternatively, was developed and dual-licensed under both a commercial license and the GPL.[8] yaSSL offered a more modern API, commercial style developer support and was complete with an OpenSSL compatibility layer.[4] The first major user of wolfSSL/CyaSSL/yaSSL was MySQL.[9] Through bundling with MySQL, yaSSL has achieved extremely high distribution volumes in the millions.

In February 2019, Daniel Stenberg, the creator of cURL, was hired by the wolfSSL project to work on cURL.[10]

Protocols

Main article: Transport Layer Security

The wolfSSL lightweight SSL library implements the following protocols:[11]

Protocol Notes:

  • SSL 2.0 – SSL 2.0 was deprecated (prohibited) in 2011 by RFC 6176. wolfSSL does not support it.
  • SSL 3.0 – SSL 3.0 was deprecated (prohibited) in 2015 by RFC 7568. In response to the POODLE attack, SSL 3.0 has been disabled by default since wolfSSL 3.6.6, but can be enabled with a compile-time option.[12]

Algorithms

wolfSSL uses the following cryptography libraries:

wolfCrypt

By default, wolfSSL uses the cryptographic services provided by wolfCrypt.[13] wolfCrypt Provides RSA, ECC, DSS, Diffie–Hellman, EDH, NTRU (deprecated and removed), DES, Triple DES, AES (CBC, CTR, CCM, GCM), Camellia, IDEA, ARC4, HC-128, ChaCha20, MD2, MD4, MD5, SHA-1, SHA-2, SHA-3, BLAKE2, RIPEMD-160, Poly1305, Random Number Generation, Large Integer support, base 16/64 encoding/decoding, and post-quantum cryptographic algorithms: ML-KEM (certified under FIPS 203) and ML-DSA (certified under FIPS 204).

wolfCrypt also includes support for the recent X25519 and Ed25519 algorithms.

wolfCrypt acts as a back-end crypto implementation for several popular software packages and libraries, including MIT Kerberos[14] (where it can be enabled using a build option).

NTRU

CyaSSL+ includes NTRU[15] public key encryption. The addition of NTRU in CyaSSL+ was a result of the partnership between yaSSL and Security Innovation.[15] NTRU works well in mobile and embedded environments due to the reduced bit size needed to provide the same security as other public key systems. In addition, it's not known to be vulnerable to quantum attacks. Several cipher suites utilizing NTRU are available with CyaSSL+ including AES-256, RC4, and HC-128.

Hardware Integration

Secure Element Support

wolfSSL supports the following Secure Elements:

Technology Support

wolfSSL supports the following hardware technologies:

  • Intel SGX (Software Guard Extensions) [16] - Intel SGX allows a smaller attack surface and has been shown to provide a higher level of security for executing code without a significant impact on performance.

Hardware Encryption Support

The following tables list wolfSSL's support for using various devices' hardware encryption with various algorithms.

AES cipher modes
Device AES-GCM AES-CCM AES-CBC AES-ECB AES-CTR
Intel AES-NI

(Xeon and Core processor families)

All All All All All
Freescale

Cryptographic Accelerator and Assurance Module (CAAM)

All All All All
Freescale Coldfire SEC

(NXP MCF547X and MCF548X)

All
Freescale Kinetis MMCAU

K50, K60, K70, and K80 (ARM Cortex-M4 core)

All All All All
STMicroelectronics STM32

F1, F2, F4, L1, W Series (ARM Cortex - M3/M4)

All All
Cavium NITROX

(III/V PX processors)

All
Microchip PIC32 MX/MZ

(Embedded Connectivity)

All All All
Texas Instruments TM4C1294

(ARM Cortex-M4F)

All All All All All
Nordic NRF51 Archived 2018-06-19 at the Wayback Machine

(Series SoC family, 32-bit ARM Cortex M0 processor core)

128-bit
ARMv8 All All All
Intel QuickAssist Technology All All
Freescale NXP LTC All All All All All
Xilinx Zynq UltraScale+ 256-bit
Renesas RX65N (R5F565NEHDFB) All All
Renesas RX72N (RTK5RX72N0C00000BJ) All All
Renesas RX MPU (R5F571MLDDFC) All All
Renesas Synergy DK-S7G2 128-bit

- "All" denotes 128, 192, and 256-bit supported block sizes

DES/3DES cipher modes
Device DES-CBC DES-ECB 3DES-CBC
Freescale Coldfire SEC

(NXP MCF547X and MCF548X)

64 bit 192 bit
Freescale Kinetis MMCAU

K50, K60, K70, and K80 (ARM Cortex-M4 core)

64 bit 192 bit
STMicroelectronics STM32

F1, F2, F4, L1, W Series (ARM Cortex - M3/M4)

64 bit 64 bit (encrypt) 192 bit
Cavium NITROX

(III/V PX processors)

192 bit
Microchip PIC32 MX/MZ

(Embedded Connectivity)

64 bit 192 bit
Texas Instruments TM4C1294

(ARM Cortex-M4F)

64 bit 192 bit
Stream ciphers
Device RC4 ChaCha20
AVX1/AVX2

(Intel and AMD x86)

Supported
Cavium NITROX

(III/V PX processors)

2048 bit max.
Hashing algorithm support
Device MD5 SHA1 SHA2 SHA-256 SHA-384 SHA-512
AVX1/AVX2

(Intel and AMD x86)

Supported Supported Supported
Freescale Kinetis MMCAU

K50, K60, K70, and K80 (ARM Cortex-M4 core)

Supported Supported Supported
STMicroelectronics STM32

F1, F2, F4, L1, W Series (ARM Cortex - M3/M4)

Supported Supported
Microchip PIC32 MX/MZ

(Embedded Connectivity)

Supported Supported Supported
ARMv8 Supported
Intel QuickAssist Technology Supported Supported Supported
Freescale NXP LTC Supported Supported
Xilinx Zynq UltraScale+ Supported
Renesas Synergy DK-S7G2 Supported Supported
Renesas RX65N (R5F565NEHDFB) Supported Supported
Renesas RX72N (RTK5RX72N0C00000BJ) Supported Supported Supported
Renesas RX MPU (R5F571MLDDFC) Supported Supported Supported
Key operations: generation and exchange, elliptic curve cryptography
Device RSA ECC ECC-DHE X25519 Ed25519
Cavium NITROX

(III/V PX processors)

512–4096 bit NIST Prime

192, 224, 256, 384, 521

Microchip/Atmel

ATECC508A (compatible with any MPU or MCU including: Atmel SMART and AVR MCUs)

256 bit

(NIST-P256)

Intel QuickAssist Technology 512–4096 bit 128, 256 bit
Freescale NXP LTC 512 - 4096 bit 128, 256 bit 128, 256 bit 256 bit 256 bit
Xilinx Zynq UltraScale+ 2048–4096 bit
MAC algorithms
Device HMAC-MD5 HMAC-SHA1 HMAC-SHA2 HMAC-SHA256 SHA-3 Poly1305
AVX1/AVX2

(Intel and AMD x86)

Supported
Cavium NITROX

(III/V PX processors)

Supported Supported Supported Supported
Microchip PIC32 MX/MZ

(Embedded Connectivity)

Supported Supported Supported
Intel QuickAssist Technology Supported Supported
Renesas RX65N (R5F565NEHDFB) Supported Supported
Renesas RX72N (RTK5RX72N0C00000BJ)
Renesas RX MPU (R5F571MLDDFC) Supported Supported
Renesas Synergy DK-S7G2 Supported
Random number generation
Device RNG
STMicroelectronics STM32

F1, F2, F4, L1, W Series (ARM Cortex - M3/M4)

Supported
Cavium NITROX

(III/V PX processors)

Supported
Nordic NRF51 Archived 2018-06-19 at the Wayback Machine

(Series SoC family, 32-bit ARM Cortex M0 processor core)

Supported

Certifications

wolfSSL supports the following certifications:

Licensing

wolfSSL is dual licensed:

  • Licensed under the GPL-2.0-or-later license. This is good for GPL open source projects and evaluation.
  • Licensed under a commercial non-GPL license. This comes with additional support and maintenance packages and is priced at 6,000 USD per product or SKU as of 2022.

See also

References

  1. ^ "wolfSSL ChangeLog".
  2. ^ "Release 5.7.4". 24 October 2024.
  3. ^ "LICENSING". GitHub.
  4. ^ a b wolfSSL – Embedded Communications Products
  5. ^ "What You Need to Know About the TLS 1.3 Protocol and wolfSSL's SSL/TLS Libraries". www.allaboutcircuits.com. Retrieved 2018-12-28.
  6. ^ "wolfSSL Embedded SSL/TLS Library | wolfSSL Products". Retrieved 2019-01-31.
  7. ^ OpenSSL: Source, License
  8. ^ wolfSSL – License
  9. ^ "MySQL, Building MySQL with Support for Secure Connections". Archived from the original on 2017-07-06. Retrieved 2016-06-12.
  10. ^ Daniel Stenberg, founder and Chief Architect of cURL, joins wolfSSL
  11. ^ wolfSSL – Docs | CyaSSL Manual – Chapter 4 (Features)
  12. ^ "wolfSSL 3.6.6 is Now Available".
  13. ^ wolfSSL – Docs | wolfSSL Manual – Chapter 10 (wolfCrypt Usage Reference)
  14. ^ Kerberos: The Network Authentication Protocol
  15. ^ a b NTRU CryptoLabs Archived 2013-02-02 at archive.today
  16. ^ wolfSSL – wolfSSL with Intel® SGX
  17. ^ WOLFCRYPT FIPS 140-2 and FIPS 140-3
  18. ^ wolfSSL Support for DO-178C DAL A

Read other articles:

Nokia 8110

Nokia 8110 adalah produk telepon genggam yang dirilis oleh perusahaan Nokia. Telepon genggam ini memiliki dimensi 141 x 48 x 25 mm dengan berat 152 gram. Dirilis pada tahun 1998. Fitur Jaringan 2G GSM 900 125 buku telepon SMS Conference calling (1-5 orang) Baterai Slim 400 mAh Li-Ion Lihat pula Daftar produk Nokia Pranala luar di GSM Arena lbsNokiaAnak usaha Nokia Bell Labs Nokia Networks Nokia Technologies Unit lain NGP Capital Nuage Networks Akuisisi Alcatel-Lucent Dopplr earthmine Enp...

 

 

Paus Gregorius X

PausGregorius XAwal masa kepausan1271Akhir masa kepausan10 Januari 1276PendahuluKlemens IVPenerusInosensius VInformasi pribadiNama lahirTheobald ViscontiLahir±1210Piacenza, ItaliaWafat10 Januari 1276Arezzo, Italia Gregorius X, nama lahir Theobald Visconti (Piacenza, Italia, ±1210 – Arezzo, Italia, 10 Januari 1276), adalah Paus Gereja Katolik Roma sejak 1271 sampai 10 Januari 1276. Namanya ditambahan pada Daftar Martir Roma oleh Paus Benediktus XIV (1740 - 1758) dengan tanggal 10 Januari s...

 

 

Kalimantan Selatan

Kalimantan SelatanProvinsiTranskripsi bahasa Banjar • Jawiکاليمانتان سلاتنDari kiri ke kanan, atas ke bawah: Pasar Terapung Banjarmasin, Tari Radap Rahayu, Taman Cahaya Bumi Selamat Martapura, Monumen Ketupat Kandangan, Jembatan Barito, Monumen Tanjung Puri Tabalong, Bundaran Dulang Rantau, dan Tugu Kijang Bundaran Angsau Pelaihari BenderaLambangJulukan: Bumi Lambung MangkuratMotto: Waja sampai kaputing[a](Banjar) Tetap semangat dan kuat seper...

Jalisco

State of Mexico For the town in Nayarit, see Xalisco. State in MexicoJaliscoStateFree and Sovereign State of JaliscoEstado Libre y Soberano de Jalisco (Spanish) FlagCoat of armsMotto(s): Jalisco es México(English: Jalisco is Mexico)Anthem: Himno del estado de Jalisco Anthem of the state of JaliscoJalisco within MexicoCoordinates: 20°40′35″N 103°20′45″W / 20.67639°N 103.34583°W / 20.67639; -103.34583CountryMexicoMunicipalities125Admission23 December 18...

 

 

Bidhan Chandra Roy

Bidhan Chandra Royবিধান চন্দ্র রায় Ketua Menteri Bengal Barat ke-2Masa jabatan23 Januari 1948 – 1 Juli 1962 PendahuluPrafulla Chandra GhoshPenggantiPrafulla Chandra SenMLAMasa jabatan1962-1967 PendahuluBijoy Singh NaharPenggantiPetahanaDaerah pemilihanChowrangheeMLAMasa jabatan1952-1962Daerah pemilihanBowbazar Informasi pribadiLahir(1882-07-01)1 Juli 1882Bankipore, Patna, BiharMeninggal1 Juli 1962(1962-07-01) (umur 80)Kolkata, Bengal BaratKebangs...

 

 

Swami Anand Krishna

Gaya atau nada penulisan artikel ini tidak mengikuti gaya dan nada penulisan ensiklopedis yang diberlakukan di Wikipedia. Bantulah memperbaikinya berdasarkan panduan penulisan artikel. (Pelajari cara dan kapan saatnya untuk menghapus pesan templat ini) Swami Anand KrishnaLahir1 September 1956 (umur 67)SurakartaSuami/istriRani Gangtani (menikah 26 Oktober 1977)[1]AnakPooja Gangtani (anak laki-laki)Prashant Gangtani (anak laki-laki)[1]Orang tuaTolaram (ayah)[2]Situs...

Stasiun Minami-Yono

JA23 Stasiun Minami-Yono南与野駅Pintu Masuk Stasiun Minami-Yono, Februari 2015Lokasi2-547 Suzuya, Chūō-ku, Saitama-shi, Saitama-ken 338-0013JepangKoordinat35°52′2.73″N 139°37′52.29″E / 35.8674250°N 139.6311917°E / 35.8674250; 139.6311917Koordinat: 35°52′2.73″N 139°37′52.29″E / 35.8674250°N 139.6311917°E / 35.8674250; 139.6311917Operator JR EastJalur■Jalur SaikyōLetak19.0 km dari IkebukuroJumlah peron1 peron pulau...

 

 

Canal del Deporte Olímpico

Chilean Olympic sports TV channel This article needs additional citations for verification. Please help improve this article by adding citations to reliable sources. Unsourced material may be challenged and removed.Find sources: Canal del Deporte Olímpico – news · newspapers · books · scholar · JSTOR (July 2017) (Learn how and when to remove this template message)This article includes a list of references, related reading, or external links, but its s...

 

 

信徒 (电视剧)

信徒Believe类型奇幻、科幻开创阿方索·卡隆主演 Johnny Sequoyah Jake McLaughlin Delroy Lindo 凯尔·麦克拉克伦 西耶娜·盖尔利 鄭智麟 Tracy Howe Arian Moayed 国家／地区美国语言英语季数1集数12每集长度43分钟制作执行制作 阿方索·卡隆 J·J·艾布拉姆斯 Mark Friedman 布赖恩·伯克 机位多镜头制作公司坏机器人制片公司华纳兄弟电视公司播出信息 首播频道全国广播公司播出日期2014年3月10日...

Бисексуальность

Флаг гордости бисексуалов Бисексуальность      Сексуальные ориентации Бисексуальность Пансексуальность Полисексуальность Моносексуальность Сексуальные идентичности Би-любопытство Гетерогибкость и гомогибкость Сексуальная текучесть Исследования Шк...

 

 

Hıdırellez

Turkish name for spring festival This article needs additional citations for verification. Please help improve this article by adding citations to reliable sources in this article. Unsourced material may be challenged and removed.Find sources: Hıdırellez – news · newspapers · books · scholar · JSTOR (June 2017) (Learn how and when to remove this message) HıdırellezHıdırellez in Crimea, 2019Observed byBalkans, TurkeyTypeInternationalSigni...

 

 

Протесты в Грузии против закона об «иноагентах» (2023)

Эта статья — о протестах марта 2023 года. О протестах 2024 года см. Протесты в Грузии против закона об «иноагентах» (2024). Протесты в Грузии (2023) Протестующие и полиция в Тбилиси Дата 6—10 марта 2023 Место Грузия Причины Принятый в первом чтении закон об иностранных аген�...

200 متر في الألعاب الأولمبية الصيفية 2012 - رجال

200 متر في الألعاب الأولمبية الصيفية 2012 - رجال في الألعاب الأولمبية الصيفية تعديل مصدري - تعديل   طالع أيضًا: ألعاب القوى في الألعاب الأولمبية الصيفية 2012 أقيم نهائي 200 متر رجال في الألعاب الأولمبية الصيفية 2012 يوم 8 أغسطس بالملعب الأولمبي بلندن الحد الأدنى المؤهل للأولمبيات...

 

 

Negasi terhadap Diaspora

Bagian dari sebuah serial tentangAliyah Imigrasi Yahudi ke Tanah Israel Konsep Tanah yang Dijanjikan Pertemuan Israel Diaspora Negasi Tanah air bagi bangsa Yahudi Zionisme Pertanyaan Yahudi Undang-undang Kepulangan Aliyah Pra-Modern Kembali ke Sion Yishuv Lama Perushim Aliyah pada zaman modern Pertama Kedua Pada Perang Dunia I Ketiga Keempat Kelima Aliyah Bet Bricha Dari negara-negara Muslim Yaman Irak Maroko Lebanon dari Uni Soviet pasca-Soviet dari Etiopia dari Amerika Latin Absorpsi Kebang...

 

 

Sacatar Trail Wilderness

Protected wilderness area in California, United States Sacatar Trail WildernessIUCN category Ib (wilderness area)LocationInyo County / Tulare County, CaliforniaNearest cityRidgecrest, CaliforniaCoordinates35°57′20″N 117°59′41″W / 35.95556°N 117.99472°W / 35.95556; -117.99472Area51,900 acres (210 km2)EstablishedOct.31, 1994Governing bodyBureau of Land Management Sacatar Trail Wilderness location in the southern Sierras The Sacatar Trail Wilder...

Timeline of World War II (1941)

List of significant events occurring during World War II in 1941 Timelines of World War II Chronological Prelude (in Asiain Europe) 1939 1940 1941 1942 1943 1944 1945 onwards By topic Diplomacy Declarations of war BattlesOperations By theatre Battle of Europe air operations Eastern FrontManhattan Project United Kingdom home front Surrender of the Axis armies vteThis article needs additional citations for verification. Please help improve this article by adding citations to reliable sources. U...

 

 

1964 Constitution of Afghanistan

Former monarchy constitution of Afghanistan Constitution of AfghanistanCreatedOctober 1964Full text Constitution of Afghanistan at WikisourceA 1965 postage stamp of Afghan Post with a picture of the proclamation of the constitution. The 1964 Constitution of Afghanistan was the supreme law of the Kingdom of Afghanistan from 1964 to 1973, when it was annulled following a coup d'état[1] though parts of the constitution were restored by future governments from 2002 to 2004 and from 2021 ...

 

 

April Wine

April Wine Paese d'origine Canada GenereHard rock[1][2][3]Heavy metal[1][2][3]Pop rock[1] Periodo di attività musicale1969 – in attività EtichettaCapitol RecordsAquarius RecordsLondon Records Album pubblicati40 Studio16 Live9 Raccolte15 Sito ufficiale Modifica dati su Wikidata · Manuale Gli April Wine sono un gruppo hard rock canadese formato nel 1969. Secondo quanto dichiarato dalla band, fu scelto il n...

Ministère fédéral de l'Enseignement (Autriche)

Pour les articles homonymes, voir Ministère de l'Enseignement. Ministère fédéral de l'Éducation, de la Science et de la Recherche Logo du ministère. Situation Région Autriche Création 27 avril 1945 Type Département ministériel Domaine Enseignement scolaire, enseignement supérieur, recherche scientifique Siège Minoritenplatz 5Vienne (Autriche) Coordonnées 48° 12′ 36″ N, 16° 21′ 47″ E Langue Allemand Organisation Ministre fédéral Martin Po...

 

 

1980 Republican Party vice presidential candidate selection

1980 Republican vice presidential nomination ← 1976 July 17, 1980 (1980-07-17) 1988 →   Nominee George H. W. Bush Home state Texas Previous Vice Presidential nominee Bob Dole Vice Presidential nominee George H. W. Bush On July 16 Gerald Ford consults with Bob Dole, Howard Baker and Bill Brock concerning the vice presidential nomination. Reagan would eventually choose Bush. This article lists those who were potential candidates for the Republican...