mbedTLS
wolfssl
Our great sponsors
| mbedTLS | wolfssl | |
|---|---|---|
| 9 | 12 | |
| 4,885 | 2,166 | |
| 2.0% | 1.8% | |
| 10.0 | 9.9 | |
| 5 days ago | 3 days ago | |
| C | C | |
| GNU General Public License v3.0 or later | GNU General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
mbedTLS
-
redbean: a single-file actually portable web server with Lua, HTTPS and SQLite
Rebean is a single executable written in ANSI C that embeds Lua 5.4, MbedTLS and SQLite. The crazy thing about this is that it is a C binary that runs on six operating systems without any cross compiling thanks to leveraging Justine Tunney's cosmopolitan.
-
Install mbedTLS on Linux
it looks like the commands are all built under https://github.com/Mbed-TLS/mbedtls/tree/development/programs and the arch mbedtls package does some extra work to rename them and copy them into /usr/local/bin: https://github.com/archlinux/svntogit-community/blob/packages/mbedtls/trunk/PKGBUILD#L55
-
Elliptic Curve Cryptography Explained
If you want to see a real implemention of arbitrary sized integer math, mbedTLS is a great example:
https://github.com/ARMmbed/mbedtls/blob/development/library/...
All of the ECC code in that library relies on this code, which can be accelerated by dedicated hardware.
-
C Deep
mbed TLS - Another crypto implementation. Apache-2.0
wolfssl
-
“Purchasing an arm”
Or something a bit more lightweight - https://github.com/wolfSSL/wolfssl
- Security Advisory 2022-10-04-1 - wolfSSL buffer overflow during a TLS 1.3 handshake (CVE-2022-39173)
- The project with a single 11,000-line code file
- Information and learning resources for cryptography newcomers
-
CryptoLyzer: A comprehensive cryptographic settings analyzer
There are many notable open-source projects (SSLyze, CipherScan, testssl.sh, tls-scan, …) and several SaaS solutions (CryptCheck, CypherCraft, Hardenize, ImmuniWeb, Mozilla Observatory, SSL Labs, …) to do a security setting analysis, especially when we are talking about TLS, which is the most common and popular cryptographic protocol. However, most of these tools heavily depend on one or more versions of one or more cryptographic protocol libraries, like GnuTLS, OpenSSL, or wolfSSL. But why is this such a problem?
-
FOSS News International #2: November 8-145, 2021
wolfSSL 5.0.0
-
Max HTTPS throughput on ESP32?
You mention mbedtls, but for an example I was able to find that wolfssl lists some benchmarks and notice that under hardware acceleration, AES CBC gives OK performance while AES GCM looks pretty bad.
What are some alternatives?
OpenSSL - TLS/SSL and crypto library
libsodium - A modern, portable, easy to use crypto library.
GnuTLS - GnuTLS
LibTomCrypt - LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.
LibreSSL - LibreSSL Portable itself. This includes the build scaffold and compatibility layer that builds portable LibreSSL from the OpenBSD source code. Pull requests or patches sent to [email protected] are welcome.
mbedcrypto - a portable, small, easy to use and fast c++14 library for cryptography.
Bcrypt - Modern(-ish) password hashing for your software and your servers
Botan - Cryptography Toolkit
Tiny AES128 in C - Small portable AES128/192/256 in C
esp-idf - Espressif IoT Development Framework. Official development framework for Espressif SoCs.
GmSSL - 支持国密SM2/SM3/SM4/SM9/SSL的密码工具箱
Crypto++ - free C++ class library of cryptographic schemes