Tokollo e ncha ea laeborari ea compact cryptographic wolfSSL 5.0.0 e teng, e lokiselitsoe ho sebelisoa ho processor- le lisebelisoa tse kentsoeng mohopolong tse kang lisebelisoa tsa Inthanete ea Lintho, litsamaiso tse bohlale tsa lapeng, litsamaiso tsa tlhahisoleseling ea makoloi, lirutha le mehala ea cellular. Khoutu e ngotsoe ka puo ea C 'me e ajoa tlas'a laesense ea GPLv2.
Laeborari e fana ka ts'ebetsong ea ts'ebetso e phahameng ea li-algorithms tsa sejoale-joale tsa cryptographic, ho kenyeletsoa ChaCha20, Curve25519, NTRU, RSA, Blake2b, TLS 1.0-1.3 le DTLS 1.2, tseo ho ea ka bahlahisi li kopaneng ka makhetlo a 20 ho feta ts'ebetsong e tsoang ho OpenSSL. E fana ka API ea eona e nolofalitsoeng le lera bakeng sa ho ikamahanya le OpenSSL API. Ho na le tšehetso bakeng sa OCSP (Online Certificate Status Protocol) le CRL (Lethathamo la ho Hlakola Setifikeiti) bakeng sa ho hlahloba ho hlakoloa ha setifikeiti.
Lintlafatso tsa mantlha tsa wolfSSL 5.0.0:
- Tšehetso ea sethaleng e ekelitsoeng: IoT-Safe (ka tšehetso ea TLS), SE050 (e nang le RNG, SHA, AES, ECC le ED25519 tšehetso) le Renesas TSIP 1.13 (bakeng sa li-microcontrollers tsa RX72N).
- Tšehetso e ekelitsoeng bakeng sa li-algorithms tsa post-quantum cryptography tse hanyetsanang le khetho ea k'homphieutha ea quantum: NIST Round 3 lihlopha tsa KEM bakeng sa TLS 1.3 le lihlopha tsa hybrid NIST ECC tse thehiloeng ho morero oa OQS (Open Quantum Safe, liboqs). Lihlopha tse hanyetsanang le khetho k'homphieutheng ea quantum le tsona li kenyelelitsoe lera ho netefatsa hore li lumellana. Tšehetso ea li-algorithms tsa NTRU le QSH e khaotsoe.
- Mojule bakeng sa kernel ea Linux e fana ka ts'ehetso bakeng sa li-algorithms tsa cryptographic tse lumellanang le maemo a ts'ireletso a FIPS 140-3. Sehlahisoa se arohaneng se hlahisoa ka ts'ebetsong ea FIPS 140-3, eo khoutu ea eona e ntseng e le sethaleng sa teko, tlhahlobo le netefatso.
- Mefuta e fapaneng ea li-algorithms tsa RSA, ECC, DH, DSA, AES/AES-GCM, tse potlakisitsoeng ho sebelisoa x86 CPU vector litaelo, li kentsoe mojuleng oa kernel ea Linux. U sebelisa litaelo tsa li-vector, li- handlers tse sitisang le tsona lia potlakisa. Ts'ehetso e kenyellelitsoeng bakeng sa subsystem bakeng sa ho lekola li-module ho sebelisa li-signature tsa dijithale. Hoa khoneha ho haha enjene e kentsoeng ea wolfCrypt crypto ka mokhoa oa "-enable-linuxkm-pie" (boemo bo ikemetseng). Mojule o fana ka ts'ehetso bakeng sa lithollo tsa Linux 3.16, 4.4, 4.9, 5.4 le 5.10.
- Ho etsa bonnete ba hore e tsamaellana le lilaebrari tse ling le lits'ebetso, tšehetso ea libssh2, pyOpenSSL, libimobiledevice, rsyslog, OpenSSH 8.5p1 le Python 3.8.5 e kentsoe lera.
- E kentse karolo e kholo ea li-API tse ncha, ho kenyeletsoa EVP_blake2, wolfSSL_set_client_CA_list, wolfSSL_EVP_sha512_256, wc_Sha512*, EVP_shake256, SSL_CIPHER_*, SSL_SESSION_*, joalo-joalo.
- E tsitsitse mefokolo e 'meli e nkoang e le bobebe: ho fanyeha ha ho etsoa li-signature tsa dijithale tsa DSA tse nang le maemo a itseng le netefatso e fosahetseng ea litifikeiti tse nang le mabitso a mangata a fapaneng ha ho sebelisoa lithibelo tsa mabitso.
Source: opennet.ru