Latest Posts

• uncategorized fips

  Securing BoringTun with wolfSSL's FIPS 140-3 Cryptography

  We’re excited to announce that wolfSSL is taking the next step in its journey to bring FIPS 140-3 compliance to the WireGuard ecosystem. Following our successful ports of our FIPS crypto into both WireGuard-linux and Wireguard-GO, we are setting our sights on a new target: BoringTun. BoringTun is a popular,...

  Read more
• uncategorized wolssl

  CRL vs OCSP: Secure Certificate Revocation with wolfSSL

  Ensuring your TLS certificates are still valid and haven’t been revoked is critical for secure communications. Two methods exist for this: Certificate Revocation Lists (CRLs) are signed lists published by Certificate Authorities that clients download and check offline. They contain serial numbers of revoked certificates and must be regularly updated...

  Read more
• uncategorized wolssl

  Protect TLS Secrets After the Handshake — Only with wolfSSL

  Most TLS libraries leave your certificates and private keys sitting in RAM long after they’re used — a jackpot for attackers with memory access. wolfSSL is the only TLS library that gives you the power to erase them completely with the wolfSSL_UnloadCertsKeys API. This function doesn’t just free memory —...

  Read more
• uncategorized

  Live Webinar: An introduction to Stateful Hash-Based Signature Schemes

  Unlock the Next Era of Cybersecurity with Stateful Hash-Based Signatures! Join “An Introduction to Stateful Hash-Based Signature Schemes” on September 11 at 9:00 AM PT, presented by Senior Software Developer Anthony Hu. Learn the fundamentals of these quantum-resistant signatures and their role in securing long-lived systems. Stateful hash-based signature schemes...

  Read more
• uncategorized wolfboot wolftpm

  Keystores and Secure Elements supported by wolfSSL

  When looking to store your cryptographic secrets, it is important to have a good platform to store them on. Even more important is the ease of accessing and using those secrets.

  Read more
• uncategorized wolssl

  Deprecation Notice: TLS 1.3 Draft 18

  The wolfSSL team is deprecating the following:

  Read more
• post-quantum uncategorized

  SLIM: Securing AI Agent Communication with MLS

  As artificial intelligence continues to evolve and transform industries, here at wolfSSL we are closely monitoring developments in Agent to Agent communication protocols such as A2A and SLIM. We recently wrote our blog post “A2A and wolfSSL” talking about how it is secured via TLS. One particularly interesting development in...

  Read more
• uncategorized wolssl

  DICE Boot Chain Via wolfCrypt’s Minimal Binary Footprint

  Device Identifier Composition Engine (DICE) represents a fairly simple approach to hardware-based device identity and secure boot. DICE creates Cryptographic Device Identities (CDIs) through a blockchain-like verification process, where each boot stage measures the next component and derives unique Compound Device Identifiers using the following formula: CDI_n = HMAC(CDI_n-1, Hash(program))...

  Read more
• uncategorized

  Live Webinar: Everything You Need to Know About Medical Device Cybersecurity - Tailored for the Asia-Pacific Time Zone

  Elevate your cybersecurity strategy with proven solutions built for connected care.

  Read more
• uncategorized fips

  Top 15 FIPS Terms You Should Know - The Full Breakdown

  We recently shared our top 15 FIPS acronyms and terms to help you get familiar with the basics. Now, let’s dive deeper into what each of these means and why they matter in the FIPS 140-3 certification process.

  Read more