News

CycloneSSL Now Supports DTLS 1.3

DTLS 1.3 is a major upgrade over DTLS 1.2, bringing TLS 1.3’s security and speed to UDP-based protocols. It cuts handshake latency from 2 round trips to 1 (and supports 0-RTT resumption), adds smarter retransmission and explicit ACKs for lossy networks, and trims overhead with a compact header.

Security is stronger by default: DTLS 1.3 mandates forward secrecy, removes weak ciphers and legacy features (static RSA/DH, CBC, renegotiation, compression), and encrypts more of the handshake—including the server certificate—reducing exposure and fingerprinting compared to DTLS 1.2.

More details on CycloneSSL

ORYX at Embedded World 2026

Oryx Embedded will exhibit at the annual Embedded World 2026 Conference & Exhibition from March 10 to 12 in Nuremberg, Germany. You can meet our team at stand No. 4-652 (Hall 4) along with demonstration projects showcasing our connectivity and security solutions on various MCUs. In particular, we will showcase a new Secure Boot demo on STM32H573 using the SSH/SFTP protocol.

Certificate Management Protocols (EST, SCEP)

We are pleased to announce the release of two new implementations designed to streamline certificate management on embedded devices:

• CycloneEST is an EST (Enrollment over Secure Transport) client implementation. EST is a certificate management protocol that provides a secure method for IoT devices to enroll for X.509 certificates over HTTPS. EST automates certificate provisioning and renewal, ensuring secure device identities without requiring manual intervention.
• CycloneSCEP is an SCEP (Simple Certificate Enrolment Protocol) client implementation. Originally developed by Cisco and later standardized in RFC 8894, SCEP offers an easy way to request and renew X.509 certificates. SCEP automates certificate enrollment, reducing manual effort and effectively supporting large-scale deployments.

These new EST & SCEP implementations complement our existing ACME implementation (CycloneACME) as well as our full-featured SSL/TLS library (CycloneSSL), offering a a comprehensive set of options to our customers. All these libraries are distributed as a full ANSI C and highly maintainable source code, and are available either as open source (GPLv2, Evaluation) or under a royalty-free commercial license.

See our Certificate Management Protocol Comparison

Ethernet Packet Capture Tool

Our new product NetSHARK is a Wireshark-compatible Ethernet packet capture tool that simplifies debugging of TCP/IP connectivity.

More details on NetSHARK

ORYX at Embedded World 2025

Oryx Embedded will exhibit at the annual Embedded World 2025 Conference & Exhibition from March 11 to 13 in Nuremberg, Germany. You can meet our team at stand No. 4-652 (Hall 4) along with demonstration projects showcasing our connectivity and security solutions on various MCUs.

Embedded 802.1X / EAP Library for MCU

Our new product CycloneEAP is an 802.1X / EAP library dedicated to embedded applications. It can be deployed in a corporate LAN where port-based access control is required via authentication. The library is distributed as a full ANSI C and highly maintainable source code, and is available either as open source (GPLv2, Evaluation) or under a royalty-free commercial license.

More details on CycloneEAP

Secure Bootloader for MCU

CycloneBOOT is a firmware update solution targetting 32-bit microcontrollers, including an In-Application Programming (IAP) Library and a secure Bootloader. This major update is based on a new architecture (reorganization of memory related functions for more flexibility and portability across different use cases). Several demonstration projects are available for various STM32 evaluation boards, emphasizing firmware updates via Ethernet or UART.

More details on CycloneBOOT

IPsec / IKEv2 Library for MCU

Our new product CycloneIPSEC is an IPsec / IKEv2 library dedicated to embedded applications. IPsec is a suite of protocols used to implement secure communication between two sites over the Internet. IPsec works at the network layer of the OSI model. The library is distributed as a full ANSI C and highly maintainable source code, and is available either as open source (GPLv2, Evaluation) or under a royalty-free commercial license.

More details on CycloneIPSEC

Full support for new STM32H5 MCU series

STMicroelectronics has just introduced its new performance-oriented STM32H5 microcontroller series. Oryx Embedded will demonstrate at Embedded World 2023 (March 14-16) its secure networking solutions portfolio (TCP / SSL / SSH / CRYPTO) running on NUCLEO-H563ZI and STM32H573I-DK Discovery kit.

Access Crypto Benchmark on STM32H5
Software Crypto Benchmark: STM32F4 vs STM32H5

ORYX at Embedded World 2023

Oryx Embedded will exhibit at the annual Embedded World 2023 Conference & Exhibition from March 14 to 16 in Nuremberg, Germany. You can meet our team at stand No. 4-445 (Hall 4, Safety & Security area) along with demonstration projects showcasing our connectivity and security solutions on various MCUs.