Latest Posts

• uncategorized wolssl

  Vulnerability Disclosure: wolfSSL CVE-2025-7394

  Affected Users: Applications using wolfSSL’s OpenSSL compatibility layer before wolfSSL version 5.8.2 that call both RAND_bytes() and fork() operations. This does not affect internal TLS operations or applications that do not explicitly use RAND_bytes().

  Read more
• uncategorized wolssl

  Vulnerability Disclosure: wolfSSL Fault Injection Attack on ECC and Ed25519 Verify Operations

  Affected Users: Users performing ECC or Ed25519 signature verification operations on devices that may be susceptible to fault injection attacks, particularly in security-critical applications such as secure boot implementations. Summary: A potential vulnerability to fault injection attacks was identified in wolfSSL’s ECC and Ed25519 signature verification operations. Fault injection is...

  Read more
• uncategorized wolfssh

  wolfSSH v1.4.22 Release

  Look at that! wolfSSH had another release. New year, new version. Welcome to wolfSSH v1.4.22. This is mainly a bug fix release. We’ve improved interoperability with other implementations of SSH. We’ve improved the build process with several IDEs, Zephyr, and LwIP. We also added an SFTP client example for the...

  Read more
• uncategorized

  Getting Started with wolfSSL – Part 2: Configuration, Embedded Porting, and Advanced TLS Features

  Learn how to configure, extend, and troubleshoot secure TLS applications with wolfSSL.

  Read more
• uncategorized wolfssh

  Vulnerability Disclosure: wolfSSH CVE-2025-11624

  Affected Users: wolfSSH with SFTP enabled on the server side before version 1.4.21.

  Read more
• uncategorized fips

  Bringing FIPS 140-3 to Proxmox Virtual Environments with wolfCrypt-FIPS

  Organizations in government, healthcare, finance, and critical infrastructure sectors are required to meet stringent compliance standards, and FIPS 140-3 certification has become a key requirement for cryptographic modules used in regulated environments. wolfSSL is uniquely positioned to help bring this level of certification to Proxmox Virtual Environment (PVE), one of...

  Read more
• uncategorized fips

  The DEADBEEF RNG Example Revisited

  A while ago we had made a blog post and a patch that showed how someone could integrate their new RNG (Random Number Generator) into our wolfCrypt library. That methodology works, but it has a fairly obvious flaw. It assumed your RNG included the DRBG (Deterministic Random Bit Generator) as...

  Read more
• uncategorized wolssl

  Vulnerability Disclosure: wolfSSL (CVE-2025-7395)

  Affected Users: Anyone using wolfSSL on Apple platforms with versions after 5.6.4 and before 5.8.0, specifically when built with WOLFSSL_SYS_CA_CERTS and WOLFSSL_APPLE_NATIVE_CERT_VALIDATION enabled (default for non-macOS Apple targets when using autotools or CMake). Summary: When using system CA certificates and Apple native certificate validation on Apple platforms, the native trust...

  Read more
• uncategorized

  Kick Off 2026 with wolfSSL: Two-Part Getting Started with wolfSSL Webinar

  Learn how to build, configure, and debug secure TLS applications with wolfSSL.

  Read more
• post-quantum uncategorized

  Crypto-Agility in the LMS Private Key

  Here at wolfSSL, we have enhanced our Leighton-Micali Signature (LMS) implementation with a new optional state serialization feature that significantly improves key reload performance for applications requiring frequent signing operations. The LMS post-quantum signature scheme is stateful by nature, meaning each signature operation updates the internal state of the private...

  Read more