Top all-time · #3056
wolfSSL
Company blog · wolfssl.comsecuritysystems
wolfSSL is the company blog at wolfssl.com, writing about security and systems. Since 2015, 24 different Hacker News readers have linked it 33 times, most often “WolfSSL”. It is still writing: the last post was on 2026-10-30, and you can follow it by feed.
Too few sampled comments (13) to say how often HN recommends it.?
Why HN links it
HN commenters link wolfSSL's site as an embedded TLS library and cite its TLS 1.3 write-up, benchmarks, and vulnerability disclosure page. Most links are pointers to the project rather than judgments of the writing.
Summarised by Claude from a sample of 13 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Providing secure communication for applications, automotive, aviation, the cloud, connected home, games, government, IP, military, mobile phones, routers,
Most-linked posts?
- WolfSSL6 people · 6 mentions · first linked 2019-04-29
- /docs/security-vulnerabilities/2 people · 2 mentions · first linked 2022-11-16
What Hacker News says?
WolfSSL has a short write up on the changes: https://www.wolfssl.com/differences-between-tls-1-2-and-tls-...
Comment linking /differences-between-tls-1-2-and-tls-1-3/
on “TLS 1.3 approved”Submitted Embedded TLS Library for Applications, Devices, and the Cloud as a story · 3 points
HN discussionI wonder if the Bear reference is in relation to the other smaller SSL implementation in WolfSSL https://www.wolfssl.com/wolfSSL/Home.html
Comment linking /wolfSSL/Home.html
on “BearSSL – Smaller SSL/TLS”Submitted WolfSSL as a story · 3 points
HN discussionAnother option is wolfSSL ( https://wolfssl.com/wolfSSL/Home.html ) which is GPL-compatible, but also has a commercial license option. They have an OpenSSL compatibility layer, but are not a derivative of OpenSSL. My experience with their software has been very positive, and they have avoided the majority of recent insecurities. Plus they have great support for anyone working on open source projects.
Comment linking /wolfSSL/Home.html
on “Cryptographic Right Answers”Submitted Hardware-Backed Security Using WolfTPM with SPDM as a story · 2 points
HN discussionthere is also https://www.wolfssl.com/
Comment linking /
on “What changed in OpenSSL after heartbleed”Submitted TPM 2.0 Sealing Policies with WolfTPM as a story · 2 points
HN discussionBased on these benchmark numbers, 50k/s seems plausible (not sure about the no sweat bit though ;-)): https://www.wolfssl.com/wolfssl-on-pi5-benchmarks/ Also found this bit: > But second, the new Broadcom SOC finally supports the ARM cryptography extensions, which make it 45x faster at AES, for instance. With TLS almost everywhere, this keeps crypto performance from becoming the bottleneck. Nice. ( https://hackaday.…
Comment linking /wolfssl-on-pi5-benchmarks/
on “We survived 10k requests/second: Switching to signed asset URLs in an emergency”Submitted Why C Remains the Gold Standard for Cryptographic Software as a story · 2 points
HN discussionFor one thing, they are rather transparent: https://www.wolfssl.com/docs/security-vulnerabilities/ For another, I used them for an embedded project for 5 years and they were the most complete, competent, and up-to-date library of the open-source ones we surveyed (and had a TON of optimizations for TI, STM, Arm and Cavium MCUs).
Comment linking /docs/security-vulnerabilities/
on “Liblithium: A lightweight and portable cryptography library”Submitted BUSted: Side-channel attacks to TrustZone-M separation as a story · 2 points
HN discussionIt's a beautiful response: Hello Department of Energy, I cannot find that you are an existing customer of ours, so we cannot fulfill this request. libcurl is a product we work on. It is open source and licensed under an MIT-like license in which the distribution and use conditions are clearly stated. If you contact support@wolfssl.com we can remedy this oversight and can then arrange for all the paperwork and attest…
Comment linking /products/support-and-maintenance/
on “So the Department of Energy emailed me”Submitted WolfSSL with Curl and Tiny-Curl as a story · 2 points
HN discussionIt is quantitatively better at finding and exploiting vulnerabilities. Pretty wild that everyone here is just in denial about that, when folks who have used it say it's as good as the hype Cf wrote a genuinely good piece and had found a bunch of bugs: https://blog.cloudflare.com/cyber-frontier-models/ Wolfssl is security focused and it found a novel exploit https://www.wolfssl.com/how-claude-mythos-preview-helped-ha…
Comment linking /how-claude-mythos-preview-helped-harden-wolfssl/
on “Expanding Project Glasswing”Submitted WolfSSH – Lightweight SSH Library as a story · 1 points
HN discussionhttps://www.wolfssl.com/ Error 503 certificate has expired
Comment linking /
on “What is the incentive for curl to release the library for free?”Submitted wolfSSL Announcing wolfCOSE: COSE on FIPS-Validated WolfCrypt as a story · 1 points
HN discussion> I have no room for TLS on micro computer How micro is your micro? There are embedded TLS stacks such as wolfSSL[1]. If you carefully select the cipher suite and certificate requirements, and perhaps limit TLS payload sizes, you may be able to fit on a lot more systems than you initially suspect. x.509 is expensive in code space though, if that's the constraint, you may do better with an application specific certif…
Comment linking /
on “Ask HN: Can a TCP connection be MitM attacked if already established?”Submitted Firefox Gets FIPS 140-3 Power: WolfPKCS11 Unleashes WolfCrypt in NSS as a story · 1 points
HN discussionI wanted to mention WolfSSL. I like to recommend that project because it has a very transparent vulnerabilities approach, and is in my opinion written a lot more sane than OpenSSL which is somewhat not using standard C features because it always implements everything from scratch like a kernel does. But yeah, anyways, WolfSSL comes from the embedded area in case that's your thing. [1] https://www.wolfssl.com/ [2] ht…
Comment linking /
on “AI found 12 vulnerabilities in OpenSSL”Submitted wolfSSL Announces SPDM Support in wolfTPM TPM 2.0 as a story · 1 points
HN discussionSee first, mbedtls and openssl with $0 FOSS licensing. Wolfssl needs a 'commercial license' to ship it in a proprietary product: > Businesses and enterprises who wish to incorporate wolfSSL products into proprietary appliances or other commercial software products for re-distribution must license commercial versions. Commercial licenses for wolfSSL, and wolfCrypt are available for $7,000 USD per end product or SKU.…
Comment linking /license/
on “Embedded TLS Library for Applications, Devices, and the Cloud”Submitted Bringing WolfHSM to STM32H5 TrustZone: Production-Grade HSM on a Cortex-M33 as a story · 1 points
HN discussionhttps://www.wolfssl.com/introducing-wolftrust/
Comment linking /introducing-wolftrust/
on “wolfSSL is developing wolfTrust an open source alternative to Trusted Firmware-M”Submitted The First Firmware TPM with Post-Quantum Cryptography as a story · 1 points
HN discussionIt's not just that, would you rely on crypto code from Jason Donenfeld or crypto code from "all the CVEs" WolfSSL, https://www.wolfssl.com/docs/security-vulnerabilities/ ?
Comment linking /docs/security-vulnerabilities/
on “WolfGuard: WireGuard with FIPS 140-3 cryptography”Submitted WolfTPM TPM 2.0 Library Now Supports PQC Mldsa and Mlkem as a story · 1 points
HN discussionSubmitted WolfTPM Firmware TPM (FwTPM) Support as a story · 1 points
HN discussionSubmitted WolfHSM – HSM library that uses wolfCrypt as it's fallback crypto as a story · 1 points
HN discussion
