Home

CyaSSL Embedded SSL Library

What is it?

The CyaSSL embedded SSL library is a SSL library written in ANSI standard C and targeted for embedded and RTOS environments - primarily because of its small size, speed, and feature set. It is commonly used in standard operating environments as well because of its royalty free pricing and cross platform support. CyaSSL supports industry standards up to the current TLS 1.2 level, is up to 20 times smaller than OpenSSL, and offers progressive ciphers such as HC-128, RABBIT, and NTRU. User benchmarking and feedback reports dramatically better performance when using CyaSSL over OpenSSL.

Ease of Use

CyaSSL is built for maximum portability, and is generally very easy to compile on new platforms. Several abstraction layers (including operating system, Custom I/O, and Standard C library), a simple API, and an OpenSSL compatibility layer make it easier than ever to get working in your environment or on your platform.

Language Support

CyaSSL supports the C programming language as a primary interface. It also supports several other host languages, including Java, PHP, Perl, and Python (through a swig interface). If you have interest in using CyaSSL in another programming language that it does not currently support, please contact yaSSL.

Features

• SSL version 3 and TLS versions 1, 1.1 and 1.2 (client and server)
• Minimum size of 30-100 kB, depending on build options and operating environment
• Runtime memory usage between 3-36 kB (depending on buffer size)
• DTLS support (client and server)
• OpenSSL compatibility layer
• MySQL integration
• zlib compression support
• stunnel integration
• Lighttpd, GoAhead web server support
• Mongoose Web Server support
• Multiple Hashing Functions: (MD2, MD4, MD5, SHA-1, SHA-2, SHA-256, SHA-512, RIPEMD-160)
• Block and Stream Ciphers: (DES, 3DES, AES, ARC4, RABBIT, HC-128)
• Public Key Options: (RSA, DSS, DH, EDH, NTRU)
• Password-based Key Derivation: (HMAC, PBKDF2, PKCS#5)
• RSA Key Generation
• PSK Pre-Shared Keys
• Simple API
• Interchangeable crypto and certificate libraries
• PEM and DER certificate support
• x509 v3 Signed Certificate Generation
• Intel AES-NI support
• Client authentication support
• SSL Sniffer (SSL Inspection) Support
• IPv4 and IPv6 support
• C Standard Library Abstraction Layer
• PKCS #8, #5, #12 Private Key Encryption

Supported Operating Systems

Win32/64, Linux, Mac OS X, Solaris, ThreadX, VxWorks, FreeBSD, NetBSD, OpenBSD, embedded Linux, Haiku, OpenWRT, iPhone (iOS), Android, Nintendo Wii and Gamecube through DevKitPro, QNX, MontaVista, OpenCL, NonStop, TRON/ITRON/µITRON, Micrium's µC/OS, FreeRTOS, Freescale MQX, Nucleus

Resources

yaSSL Website: http://www.yassl.com
CyaSSL Manual: http://yassl.com/yaSSL/Docs-cyassl-manual-toc.html
CyaSSL API Reference: http://yassl.com/yaSSL/Docs-cyassl-manual-17-cyassl-api-reference.html