Latest Posts

• fips uncategorized

  wolfCrypt as a FIPS 140-3 Crypto Provider for VPP

  wolfSSL has lab-demoed wolfCrypt as a crypto provider for VPP. VPP (Vector Packet Processing) is FD.io’s user-space networking data plane. wolfCrypt plugs into VPP’s crypto dispatch and handles IPsec traffic.

  Read more
• uncategorized

  wolfSSL Roadmap 2026

  Understand upcoming changes before they impact your builds, compliance timelines, and security architecture.

  Read more
• uncategorized

  wolfTPM Firmware TPM 2.0 with Post-Quantum

  Firmware TPMs (fTPMs) are enabling TPM 2.0 functionality on platforms that cannot accommodate discrete TPM devices, including microcontrollers, safety processors, FPGA soft-cores, and trusted execution environments.

  Read more
• uncategorized

  Free Support for Open Source Projects

  At wolfSSL, we are committed to supporting the open source community. If you are using wolfSSL software in an open source project and need technical assistance, contact us at support@wolfssl.com. Our engineering team is happy to help with integration, configuration, and troubleshooting questions. If you think your project may require...

  Read more
• uncategorized

  Merkle Tree Certificates

  If you’re part of the Web PKI community and haven’t heard of Merkle Tree Certificates then you must have been hiding under a rock for the past year! These are the new format of certificates that are being pushed by Google and Cloudflare to solve the issue of large public...

  Read more
• uncategorized

  wolfKeyMgr: Decrypt Internal TLS 1.3 Traffic Without Breaking It

  TLS 1.3 made per-session forward secrecy the default. That is a win for privacy on the open internet, but inside your own data center it leaves monitoring, compliance, and intrusion-detection tools blind to the traffic they are meant to watch. wolfKeyMgr is wolfSSL’s answer.

  Read more
• uncategorized

  Why is wolfSSL reporting so many CVEs?

  Why are we reporting so many CVEs?

  Read more
• uncategorized

  wolfCOSE vs The Field: The smallest and fastest COSE library, now with post-quantum ML-DSA at the same cost.

  Scope: ES256 (P-256) COSE_Sign1 size and speed plus post-quantum ML-DSA (FIPS 204), wolfCOSE vs t_cose vs COSE-C, with cross-language and on-device results. Method: one identical operation, every library and crypto backend built from source on one machine with identical flags, dead-code eliminated. Desktop: x86_64 Intel i9-11950H, GCC 14.2. On-device: NUCLEO-H563ZI...

  Read more
• uncategorized

  Post-Quantum Cryptography in curl

  wolfSSL continues to advance post-quantum cryptography support throughout its ecosystem, including curl when built with wolfSSL. Developers can use post-quantum and hybrid TLS 1.3 key exchange mechanisms, including ML-KEM, to help protect connections against future quantum threats. Supported Hybrid TLS 1.3 Key Exchange:

  Read more
• uncategorized

  wolfSSL vs OpenSSL: Heap Usage Comparison

  When choosing a TLS library, two questions come up again and again: how much memory does it use and how fast is it. This post focuses on memory, comparing the heap usage of wolfSSL against several OpenSSL releases for an identical TLS 1.2 handshake. All numbers below were regenerated with...

  Read more