wolfSSL (formerly CyaSSL) is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3!

Sean Parkinson d7b0b97352 Merge pull request #3955 from kaleb-himes/OE18-external-to-module-changes 15 hours ago
IDE 71e2f191a6 Merge pull request #3947 from dgarske/nxp_ltc 5 days ago
IPP 55a56cac05 Release 3.7.0 5 years ago
certs 44a20c8ce6 add more unit test case for load_crl_file 1 month ago
cmake cd9f400cf3 Clean up CMake option strings. 1 month ago
ctaocrypt c729318ddd update copyright date 1 month ago
cyassl c729318ddd update copyright date 1 month ago
doc 5d9ee97530 WOLFSSL_AES_CBC_LENGTH_CHECKS: add gated logic to aes.c wc_AesCbc{En,De}crypt() to return BAD_LENGTH_E when input length is not a multiple of AES_BLOCK_SIZE; add gated tests of new functionality in test_wc_AesCbcEncryptDecrypt(); fix first encrypt-decrypt-memcmp in test_wc_AesCbcEncryptDecrypt() to span all of test vector and extend test vector length to be block-multiple; add ungated logic in platform-specific wc_AesCbc{En,De}crypt() routines to return with early success when blocks == 0 (also mitigates buffer overrun on short (less-than-AES_BLOCK_SIZE) input); add BAD_LENGTH_E error code; update documentation. 3 weeks ago
examples a22defec50 Fix for availability of `wolfSSL_SESSION_print`. 3 weeks ago
lib 6b88eb05b1 1.8.8 init 10 years ago
linuxkm c729318ddd update copyright date 1 month ago
m4 3ac03d3d66 Merge pull request #3805 from JacobBarthelmeh/copyright 1 month ago
mcapi c729318ddd update copyright date 1 month ago
mplabx c729318ddd update copyright date 1 month ago
mqx 55ea2facdd Changes to clear issues raised by cppcheck 1 year ago
rpm 847938f4d6 prepare for release v4.7.0 2 months ago
scripts d44549fd77 only update OPENSSL_ENGINE_ID if already set 1 week ago
src 2db06eb3b7 Changed the logic for determining the group used for KeyShare. 4 days ago
sslSniffer c729318ddd update copyright date 1 month ago
support 6e6b341b46 Removed automatically generated file wolfssl.pc 3 years ago
swig c729318ddd update copyright date 1 month ago
tests c129f630e2 Merge pull request #3933 from miyazakh/rand_bytes_regression 5 days ago
testsuite c729318ddd update copyright date 1 month ago
tirtos b83804cb9d Correct misspellings and typos from codespell tool 1 year ago
wolfcrypt bb75c4d610 SP DIV word C: Add instead of OR 4 days ago
wolfssl d7b0b97352 Merge pull request #3955 from kaleb-himes/OE18-external-to-module-changes 15 hours ago
wrapper c729318ddd update copyright date 1 month ago
.gitignore 749425e1e8 first pre alpha code for QNX + CAAM 1 month ago
stamp-h.in 5d49bf7cb0 Brian Aker commits plus some minor changes like AM_CFLAGS getting AC_SUBST and --enable-xxx #ifdef to new header layout 9 years ago
CMakeLists.txt 0403990cc8 Add support for session tickets in CMake. 1 month ago
COPYING be65f5d518 update FSF address, wolfSSL copyright 7 years ago
ChangeLog.md 3a9d533d2c update changelog with researchers names, thanks Aina and Olivier 2 months ago
INSTALL 8f6c21d600 CMake improvements. 5 months ago
LICENSING 970391319b Add or later verbage to LICENSING and sync header license versions 9 months ago
LPCExpresso.cproject a48981c3c6 Chacha20 ARM optimization 1 year ago
LPCExpresso.project a48981c3c6 Chacha20 ARM optimization 1 year ago
Makefile.am c17597a4fb build: arbitrary path for `make check` 2 months ago
README 3a9d533d2c update changelog with researchers names, thanks Aina and Olivier 2 months ago
README.md dfb7848320 add link to wolfssl-examples repository in README 2 weeks ago
SCRIPTS-LIST 851a547fd5 FIPS Hash 1 year ago
Vagrantfile d76d74d6c5 updates Linux deps on README 4 years ago
async-check.sh 533f4a5c77 Speedups for the `git clone` calls in check scripts to use `--depth 1`. 2 years ago
autogen.sh 86101468fc Fixes for know wolfSSL build issues in the following cases: 1 year ago
commit-tests.sh 0ee7d7cc17 1. Add DES3 enable to full commit test. 4 years ago
configure.ac 5f6b618e71 configure.ac: add --enable-aescbc-length-checks and add it to --enable-all; api.c: fix expected error code in WOLFSSL_AES_CBC_LENGTH_CHECKS path of test_wc_AesCbcEncryptDecrypt(); aes.c: add explanatory comment on WOLFSSL_AES_CBC_LENGTH_CHECKS to top of file. 3 weeks ago
fips-check.sh ef5271dd9f fips-check script shouldn't force FIPS-ready build to be v2. 8 months ago
fips-hash.sh ba9fd89314 Script Portability 11 months ago
gencertbuf.pl b6d6b1db77 Added new DH 4096-bit key to `gencertbuf.pl`. 1 year ago
input 696169634e check return value of wolfSSL_set_fd 5 years ago
pre-commit.sh cd61fbd0fe Modify pre-commit.sh to only stash and stash pop if there are modified files not 5 months ago
pre-push.sh 95db44def3 remove autogen clone of fips repo; pre-push runs fips-check if fips directory exists 5 years ago
pull_to_vagrant.sh 21d70636dc Merge branch csr into 'master' 5 years ago
quit 5d49bf7cb0 Brian Aker commits plus some minor changes like AM_CFLAGS getting AC_SUBST and --enable-xxx #ifdef to new header layout 9 years ago
resource.h 05ca60a266 Add a version resource to the wolfSSL library for Visual Studio builds. 2 years ago
stamp-h.in 5d49bf7cb0 Brian Aker commits plus some minor changes like AM_CFLAGS getting AC_SUBST and --enable-xxx #ifdef to new header layout 9 years ago
valgrind-bash.supp 3444b115ba Fix valgrind check to ignore bash leak 8 months ago
valgrind-error.sh 3444b115ba Fix valgrind check to ignore bash leak 8 months ago
wnr-example.conf 3449990374 add example netRandom config file 5 years ago
wolfssl-ntru.sln bb92d41e8d xcode projects, merge Chriss latest 6 years ago
wolfssl-ntru.vcproj 83b0847e66 add rc2.c to Visual Studio projects 5 months ago
wolfssl.rc 5f3ee2985c bump version for development bundles 2 months ago
wolfssl.sln bb92d41e8d xcode projects, merge Chriss latest 6 years ago
wolfssl.vcproj a55e94cf6f ECCSI and SAKKE: add support 1 month ago
wolfssl.vcxproj a55e94cf6f ECCSI and SAKKE: add support 1 month ago
wolfssl64.sln 6970333473 1. Set the base address of the 32-bit DLL builds. 3 years ago


*** Description ***

The wolfSSL embedded SSL library (formerly CyaSSL) is a lightweight SSL/TLS
library written in ANSI C and targeted for embedded, RTOS, and
resource-constrained environments - primarily because of its small size, speed,
and feature set. It is commonly used in standard operating environments as well
because of its royalty-free pricing and excellent cross platform support.
wolfSSL supports industry standards up to the current TLS 1.3 and DTLS 1.2
levels, is up to 20 times smaller than OpenSSL, and offers progressive ciphers
such as ChaCha20, Curve25519, NTRU, and Blake2b. User benchmarking and feedback
reports dramatically better performance when using wolfSSL over OpenSSL.

wolfSSL is powered by the wolfCrypt library. Two versions of the wolfCrypt
cryptography library have been FIPS 140-2 validated (Certificate #2425 and
certificate #3389). For additional information, visit the wolfCrypt FIPS FAQ
(https://www.wolfssl.com/license/fips/) or contact fips@wolfssl.com

*** Why choose wolfSSL? ***

There are many reasons to choose wolfSSL as your embedded SSL solution. Some of
the top reasons include size (typical footprint sizes range from 20-100 kB),
support for the newest standards (SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2, TLS 1.3,
DTLS 1.0, and DTLS 1.2), current and progressive cipher support (including
stream ciphers), multi-platform, royalty free, and an OpenSSL compatibility API
to ease porting into existing applications which have previously used the
OpenSSL package. For a complete feature list, see chapter 4 of the wolfSSL
manual. (https://www.wolfssl.com/docs/wolfssl-manual/ch4/)

*** Notes, Please read ***

Note 1)
wolfSSL as of 3.6.6 no longer enables SSLv3 by default. wolfSSL also no longer
supports static key cipher suites with PSK, RSA, or ECDH. This means if you
plan to use TLS cipher suites you must enable DH (DH is on by default), or
enable ECC (ECC is on by default), or you must enable static key cipher suites


though static key cipher suites are deprecated and will be removed from future
versions of TLS. They also lower your security by removing PFS. Since current
NTRU suites available do not use ephemeral keys, WOLFSSL_STATIC_RSA needs to be
used in order to build with NTRU suites.

When compiling ssl.c, wolfSSL will now issue a compiler error if no cipher
suites are available. You can remove this error by defining
WOLFSSL_ALLOW_NO_SUITES in the event that you desire that, i.e., you're not
using TLS cipher suites.

Note 2)
wolfSSL takes a different approach to certificate verification than OpenSSL
does. The default policy for the client is to verify the server, this means
that if you don't load CAs to verify the server you'll get a connect error,
no signer error to confirm failure (-188).

If you want to mimic OpenSSL behavior of having SSL_connect succeed even if
verifying the server fails and reducing security you can do this by calling:

wolfSSL_CTX_set_verify(ctx, SSL_VERIFY_NONE, 0);

before calling wolfSSL_new();. Though it's not recommended.

Note 3)
The enum values SHA, SHA256, SHA384, SHA512 are no longer available when
wolfSSL is built with --enable-opensslextra (OPENSSL_EXTRA) or with the macro
NO_OLD_SHA_NAMES. These names get mapped to the OpenSSL API for a single call
hash function. Instead the name WC_SHA, WC_SHA256, WC_SHA384 and WC_SHA512
should be used for the enum name.

*** end Notes ***

# wolfSSL Release 4.7.0 (February 16, 2021)
Release 4.7.0 of wolfSSL embedded TLS has bug fixes and new features including:

### New Feature Additions
* Compatibility Layer expansion SSL_get_verify_mode, X509_VERIFY_PARAM API, X509_STORE_CTX API added
* WOLFSSL_PSK_IDENTITY_ALERT macro added for enabling a subset of TLS alerts
* Function wolfSSL_CTX_NoTicketTLSv12 added to enable turning off session tickets with TLS 1.2 while keeping TLS 1.3 session tickets available
* Implement RFC 5705: Keying Material Exporters for TLS
* Added --enable-reproducible-build flag for making more deterministic library outputs to assist debugging
* Added support for S/MIME (Secure/Multipurpose Internet Mail Extensions) bundles

### Fixes
* Fix to free mutex when cert manager is free’d
* Compatibility layer EVP function to return the correct block size and type
* DTLS secure renegotiation fixes including resetting timeout and retransmit on duplicate HelloRequest
* Fix for edge case with shrink buffer and secure renegotiation
* Compile fix for type used with curve448 and PPC64
* Fixes for SP math all with PPC64 and other embedded compilers
* SP math all fix when performing montgomery reduction on one word modulus
* Fixes to SP math all to better support digit size of 8-bit
* Fix for results of edge case with SP integer square operation
* Stop non-ct mod inv from using register x29 with SP ARM64 build
* Fix edge case when generating z value of ECC with SP code
* Fixes for PKCS7 with crypto callback (devId) with RSA and RNG
* Fix for compiling builds with RSA verify and public only
* Fix for PKCS11 not properly exporting the public key due to a missing key type field
* Call certificate callback with certificate depth issues
* Fix for out-of-bounds read in TLSX_CSR_Parse()
* Fix incorrect AES-GCM tag generation in the EVP layer
* Fix for out of bounds write with SP math all enabled and an edge case of calling sp_tohex on the result of sp_mont_norm
* Fix for parameter check in sp_rand_prime to handle 0 length values
* Fix for edge case of failing malloc resulting in an out of bounds write with SHA256/SHA512 when small stack is enabled

### Improvements/Optimizations
* Added --enable-wolftpm option for easily building wolfSSL to be used with wolfTPM
* DTLS macro WOLFSSL_DTLS_RESEND_ONLY_TIMEOUT added for resending flight only after a timeout
* Update linux kernel module to use kvmalloc and kvfree
* Add user settings option to cmake build
* Added support for AES GCM session ticket encryption
* Thread protection for global RNG used by wolfSSL_RAND_bytes function calls
* Sanity check on FIPs configure flag used against the version of FIPs bundle
* --enable-aesgcm=table now is compatible with --enable-linuxkm
* Increase output buffer size that wolfSSL_RAND_bytes can handle
* Out of directory builds resolved, wolfSSL can now be built in a separate directory than the root wolfssl directory

### Vulnerabilities
* [HIGH] CVE-2021-3336: In earlier versions of wolfSSL there exists a potential man in the middle attack on TLS 1.3 clients. Malicious attackers with a privileged network position can impersonate TLS 1.3 servers and bypass authentication. Users that have applications with client side code and have TLS 1.3 turned on, should update to the latest version of wolfSSL. Users that do not have TLS 1.3 turned on, or that are server side only, are NOT affected by this report. For the code change see https://github.com/wolfSSL/wolfssl/pull/3676. Thanks to Aina Toky Rasoamanana and Olivier Levillain from Télécom SudParis for the report.
* [LOW] In the case of using custom ECC curves there is the potential for a crafted compressed ECC key that has a custom prime value to cause a hang when imported. This only affects applications that are loading in ECC keys with wolfSSL builds that have compressed ECC keys and custom ECC curves enabled.
* [LOW] With TLS 1.3 authenticated-only ciphers a section of the server hello could contain 16 bytes of uninitialized data when sent to the connected peer. This affects only a specific build of wolfSSL with TLS 1.3 early data enabled and using authenticated-only ciphers with TLS 1.3.

For additional vulnerability information visit the vulnerability page at

See INSTALL file for build instructions.
More info can be found on-line at https://wolfssl.com/wolfSSL/Docs.html

*** Resources ***

[wolfSSL Website](https://www.wolfssl.com/)

[wolfSSL Wiki](https://github.com/wolfSSL/wolfssl/wiki)

[FIPS FAQ](https://wolfssl.com/license/fips)

[wolfSSL Documents](https://wolfssl.com/wolfSSL/Docs.html)

[wolfSSL Manual](https://wolfssl.com/wolfSSL/Docs-wolfssl-manual-toc.html)

[wolfSSL API Reference]

[wolfCrypt API Reference]

[TLS 1.3](https://www.wolfssl.com/docs/tls13/)

[wolfSSL Vulnerabilities]