ESP-IDF comes with the mbedtls library. Getting started with Mbed TLS. Apparently, you can also swap in wolfSSL instead – see here.