Latest Posts

• uncategorized

  Terminology Tuesday: Key Establishment and Friends

  Key Establishment: This is the broader umbrella term that encompasses any protocol by which parties establish a shared secret key. It includes both key agreement and key transport as subcategories. Key establishment is the general goal, while key agreement and key transport are the two main approaches to achieving it....

  Read more
• uncategorized wolftpm

  Keystores and Secure Elements supported by wolfSSL In 2026

  When looking to store your cryptographic secrets, it is important to have a good platform to store them on. Even more important is the ease of accessing and using those secrets. With wolfTPM, we have support for all TPM 2.0 APIs. Additionally, we provide the following wrappers:

  Read more
• uncategorized

  Designing Secure Satellite Systems with FIPS 140-3, CNSA 2.0, and PQC

  Meeting evolving security requirements like CNSA 2.0 and FIPS 140-3 is becoming a critical challenge for satellite systems, especially when deployments must remain secure for decades with limited ability to update. Design decisions made early in the architecture directly impact certification timelines, long-term security, and system maintainability.

  Read more
• uncategorized

  Getting Started with wolfHSM for Automotive

  Secure automotive ECUs without vendor lock-in or fragmented HSM APIs.

  Read more
• uncategorized wolssl

  Caliptra: Your Silicon's Security Chaperone

  As a member of the wolfSSL team, each day is a new opportunity to learn. This time, we delve into Caliptra and our plans for it in the near future.

  Read more
• uncategorized fips

  FIPS 140-3 Validated Proxmox VE: Is There Demand?

  We’re looking at bringing FIPS 140-3 validated cryptography to Proxmox VE. Before we commit, we want to know if the market actually wants it.

  Read more
• uncategorized wolssl

  wolfSSL as a Cryptographic Service Provider for VPP

  The engineering team at wolfSSL is working on integrating wolfCrypt as a cryptographic service provider for FD.io’s Vector Packet Processing framework. This will give VPP deployments access to FIPS 140-3 validated cryptography, hardware acceleration support, and wolfSSL’s battle-tested implementations directly within the high-performance data plane. This work targets network packet...

  Read more
• uncategorized wolfprovider

  wolfProvider: Drop-In FIPS 140 Compliance for OpenSSL Applications

  Do you have a Linux application, service, container, or distribution that depends on OpenSSL and must meet FIPS 140 requirements, or interoperate with systems operating in FIPS-approved mode?

  Read more
• uncategorized wolfhsm

  Securing wolfHSM POSIX Transport with TLS

  The recent addition of a TLS transport to the wolfHSM project provides improved transport-level protection for POSIX-based communications and was included with the latest release.

  Read more
• uncategorized wolfssl-jsse-provider-and-jni-wrapper

  New X.509 Certificate Extension APIs in wolfSSL and wolfSSL JNI

  wolfSSL now adds new public X.509 certificate-generation APIs for key identifiers, CRL distribution points, and Netscape certificate type handling. wolfSSL JNI builds on top of these APIs and now exposes matching Java methods in WolfSSLCertificate. New public wolfSSL APIs (C)

  Read more