Latest Posts

• uncategorized

  Live Webinar: Full-Linux FIPS 140-3 via wolfCrypt on Yocto Linux

  Achieving FIPS 140-3 compliance on embedded Linux becomes difficult when different applications and system components rely on different cryptographic libraries.

  Read more
• wolssl uncategorized

  wolfSSL Now Available for Zephyr’s Secure Sockets Layer

  We’re pleased to announce that wolfSSL can now be integrated directly into the secure sockets layer of the Zephyr RTOS. The required patches are available now in our Open Source Project (OSP) repository.

  Read more
• wolssl uncategorized

  A Quantum Safety Net for TLS 1.3: Mandatory PSKs with Certificate Authentication

  TLS 1.3 normally forces a choice: authenticate with certificates or with a pre-shared key, but not both in the same handshake. Combining them gives you a second, independent root of trust that survives even if the first one falls — and wolfSSL now supports both doing this and requiring it....

  Read more
• wolfpkcs11 uncategorized

  Post-Quantum Cryptography in PKCS#11: ML-KEM and ML-DSA in wolfSSL and wolfPKCS11

  The migration to post-quantum cryptography is now a practical requirement, with NIST’s standardization of ML-KEM (FIPS 203) and ML-DSA (FIPS 204) and timelines such as NSA’s CNSA 2.0 driving adoption. PKCS#11 is a natural place to make that move, and wolfSSL now supports it.

  Read more
• wolssl uncategorized

  Stateful Hash-Based Signatures (LMS and XMSS) in X.509 Certificates

  wolfSSL now supports the stateful hash-based signature schemes LMS/HSS and XMSS/XMSS^MT in X.509 certificates, following RFC 9802.

  Read more
• wolssl uncategorized

  wolfCrypt on the TI C2000 C28x: PQC ML-DSA/ML-KEM on a 16-bit-byte DSP

  We’re excited to share that wolfCrypt now runs a full modern crypto suite on Texas Instruments’ C2000 C28x – the NIST post-quantum schemes ML-DSA (FIPS 204) and ML-KEM (FIPS 203), plus RSA, Diffie-Hellman, AES, ChaCha20-Poly1305, HMAC/HKDF, the Curve25519/Ed25519, Curve448/Ed448, and NIST P-256 elliptic-curve schemes, and the SHA-1/2/3 and SHAKE hash...

  Read more
• wolfhsm uncategorized wolssl

  wolfSSL adds LMS and XMSS to wolfHSM

  LMS and XMSS are stateful hash-based signature schemes (NIST SP 800-208) suited to long-lived firmware and code signing. wolfSSL has added support for both post-quantum cryptographic (PQC) algorithms to wolfHSM. This feature leverages the hardware security module (HSM) to securely and persistently store the “stateful” key and counter for both...

  Read more
• wolssl uncategorized

  MbedOS End of Life; but wolfSSL on MbedOS lives on

  MbedOS goes into End-of-Life in July this year, but as we are committed to our customers and their security, we will still support wolfSSL product on MbedOS going forward. If you’re in a pinch with CRA or other security requirements, feel free to contact us at facts@wolfssl.com, and we’ll work...

  Read more
• wolfip uncategorized

  wolfIP comes to AMD/Xilinx: bare-metal TCP/IP on ZynqMP, Versal and Zynq-7000

  We have added bare-metal wolfIP ports for three AMD/Xilinx PS-GEM SoCs, all brought up and measured on real hardware:

  Read more
• wolfentropy uncategorized

  wolfSSL granted NIST ESV Cert #335

  Following a Dec 5, 2025 submission, the wolfSSL proprietary, software-based TRNG ‘wolfEntropy’ has officially achieved NIST Entropy Source Validation: ESV Certificate #335.

  Read more