wolfssl-sys

This crate provides auto-generated unsafe Rust bindings through bindgen, to C functions provided by the WolfSSL library. Currently the build options are hard coded to match what we use for Lightway, but will be updated soon to support features.

Note: This is a very early release and as such there are a number of limitations with this implementation. Expect it to improve significantly in the very near future.

Why WolfSSL?

At ExpressVPN we love WolfSSL. It's fast, secure, easy to use and of course it's Open Source. That's why when we were looking at TLS libraries to use as the core of Lightway, WolfSSL was a clear winner. Now that we're doing more research with Rust, it's only natural that we'd want to keep using WolfSSL, but alas, there weren't any Rust bindings available.

So we built one :)

Getting started

Add wolfssl-sys to your Cargo manifest:

[dependencies] wolfssl-sys = "0.1.6" To ensure that the crate can be built even offline, the crate includes the source code for WolfSSL (currently version 5.4.0). WolfSSL uses autotools to build and configure the library so this will need to be install on the build system.

Building with Earthly

There is also an Earthfile provided so that you can build the crate in Earthly:

earthly +build-crate

Post Quantum cryptography support

WolfSSL offers Post Quantum support by leveraging liboqs, a library from the Open Quantum Safe project. This includes the current hybrid schemes which are the recommended way of experimenting with Post Quantum today. The feature is not enabled by default as it requires building and linking against liboqs which would increase the library size and increase compile time. It can be enabled by enabling the postquantum feature:

toml [dependencies] wolfssl-sys = { version = "0.1.6" features = ["postquantum"] }

This will automatically build liboqs from the oqs-sys crate and link WolfSSL against it, making definitions such as WOLFSSL_P521_KYBER_LEVEL5 available.

Contributors

A number of people have taken the time to contribute towards this crate. From opening valuable issues, to contributing a line or two of code, we would like to give credit for their help here:

TODO