Latest Posts

• uncategorized

  Full Linux FIPS 140-3 via wolfCrypt on Yocto Linux

  Achieving and maintaining FIPS 140-3 compliance across embedded Linux platforms can be difficult, especially when integrating cryptography into Yocto-based environments.

  Read more
• uncategorized

  Preparing Connected Devices for the EU Cyber Resilience Act

  The EU Cyber Resilience Act (CRA) will introduce new security and maintenance expectations for connected devices sold into the EU market, including requirements around secure development, vulnerability handling, firmware integrity, and long-term support.

  Read more
• uncategorized fips

  wolfCrypt FIPS 140-3 coming to pfSense

  FIPS 140-3 support is coming to pfSense! pfSense is one of the most widely deployed open-source firewall and router platforms in the world, powering everything from small office networks to large enterprise and government deployments. Built on FreeBSD, pfSense has earned a reputation for stability, flexibility, and a rich feature...

  Read more
• uncategorized fips

  LMS versus XMSS versus SLH-DSA Performance Data

  In a previous post, we spoke about LMS, XMSS and SLH-DSA in relation to wolfBoot and let you know we’d be bringing some benchmarking numbers. Voila!

  Read more
• uncategorized wolfprovider

  wolfProvider FIPS for the Linux TPM2 Software Stack

  As part of wolfSSL’s Full Linux FIPS project, wolfProvider provides FIPS 140-3 validated cryptography for the Linux TPM2 software stack, covering both libtss2 (the core TSS2 libraries) and tpm2-tools.

  Read more
• uncategorized wolfguard wolfip

  wolfGuard: FIPS-Compliant WireGuard VPN, Now Native in wolfIP

  wolfIP now includes native wolfGuard support, bringing a FIPS-compliant WireGuard VPN tunnel directly into the stack. wolfGuard replaces the standard WireGuard cipher suite (Curve25519, ChaCha20-Poly1305, BLAKE2s) with FIPS-certified alternatives (P-256 ECDH, AES-256-GCM, SHA-256) using wolfSSL cryptographic primitives, while preserving the Noise IKpsk2 handshake and its security properties including perfect forward...

  Read more
• uncategorized wolfboot wolfmqtt wolssl wolftpm

  OTA Demonstrator with wolfBoot, wolfTPM and wolfMQTT

  Our new demonstrator is available on GitHub.

  Read more
• uncategorized wolfip

  New Migration Guide: Moving from lwIP to wolfIP

  Do you use lwIP today and want a more deterministic networking stack for embedded, real-time, or safety-critical systems? We just published a new developer guide: Migrating from lwIP to wolfIP.

  Read more
• uncategorized wolssl

  New wolfSSL Crypto Callback Utilities: Set Key and Export Key

  wolfSSL’s crypto callback framework lets you offload cryptographic operations to hardware. PR #9851 extends this framework with two new callback utilities, Set Key and Export Key, which provide a standardized way to move key material between wolfSSL and your hardware across AES, HMAC, RSA, and ECC.

  Read more
• uncategorized wolssl

  Adding SHE (Secure Hardware Extension) Support to wolfSSL

  wolfSSL now includes support for the Secure Hardware Extension (SHE) key management standard (see PR #10009). This new wolfCrypt module provides software-based generation and verification of SHE key update messages (M1–M5), with built-in support for hardware offload via crypto callbacks.

  Read more