TLS 1.3 Sniffer Support in wolfSSL Release 4.8.0
wolfSSL has announced TLS 1.3 support for sniffer users, downloadable from the latest version of wolfSSL 4.8.0.
July 20, 2021
![](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/blt850556f866500627/654a5a8e05eb4d040a046894/325351_DR23_Graphics_General_Large_Text_v1.png?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
PRESS RELEASE
EDMONDS, WASH. (PRWEB) JULY 20, 2021
wolfSSL has announced TLS 1.3 support for sniffer users. The wolfSSL sniffer can be used to passively sniff SSL/TLS traffic including https traffic. wolfSSL supports industry standards up to the current TLS 1.3, for which we were the first commercial implementation. Our sniffer users benefit from this compatibility with the latest TLS protocol. Users can download wolfSSL 4.8.0 to access TLS 1.3 sniffer support: https://www.wolfssl.com/download/.
For TLS v1.3, all cipher suites use a new ephemeral key for each new session. Only Perfect Forward Secrecy (PFS) ciphers are allowed, whereas typically a static RSA ciphersuite would be used. In order to solve this, we added a “static ephemeral” feature, which allows setting a known key that is used for deriving a shared secret. The key can be rolled periodically and synchronized for internal or test environments. We’ve also created a Key Manager for secure distribution of ephemeral keys based on the ETSI TS 103 523-3 specification.
The wolfSSL sniffer can be integrated into any application using the existing sniffer API. Only five calls are required making it easy to integrate into any project. As a proof of concept, we added this support to Apache httpd to demonstrate real-time decryption of web traffic. Email us at [email protected] for access to the Apache httpd branch with sniffer and FIPS ready support.
Some of the main advantages of switching to TLS 1.3 from earlier versions of the protocol include quicker connection times due to reduced roundtrips during the handshake, reduced latency, improved session resumption, and more secure crypto by default. wolfSSL supports TLS 1.3 on both client and server side. To learn more about the advantages of TLS 1.3, visit our reference page: https://www.wolfssl.com/docs/tls13/.
For additional information on wolfSSL’s TLS 1.3 sniffer, visit https://www.wolfssl.com/sniffing-traffic-tls-v1-3/ and download wolfSSL version 4.8.0:
Under GPLv2 license at: https://github.com/wolfssl
Or through our website: https://www.wolfssl.com/download/
For licensing questions, contact [email protected], or meet wolfSSL on the ground at Black Hat USA! For a list of upcoming events to connect virtually or in-person, check out our events page: https://www.wolfssl.com/events/.
ABOUT WOLFSSL wolfSSL focuses on providing lightweight and embedded security solutions with an emphasis on speed, size, portability, features, and standards compliance. With its SSL/TLS products and crypto library, wolfSSL is supporting high security designs in automotive, avionics and other industries. In avionics, wolfSSL supports complete RTCA DO-178C level A certification. In automotive, we support MISRA-C capabilities. For government consumers, wolfSSL has a strong history in FIPS 140-2, with upcoming FIPS 140-3. wolfSSL supports industry standards up to the current TLS 1.3 and DTLS 1.2, is up to 20 times smaller than OpenSSL, offers a simple API, an OpenSSL compatibility layer, is backed by the robust wolfCrypt cryptography library, 24x7 support and much more. Our products are open source, giving customers the freedom to look under the hood.
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024