Latest Posts

• uncategorized

  LMS versus XMSS versus SLH-DSA for Secure Boot

  Here at wolfSSL we always stay on top of our customer’s requirements. By now you’ve heard us talk about the NSA’s (National Security Agency) CNSA 2.0 (Commercial National Security Algorithm Suite 2.0) ad nauseum. Well, let’s focus in on it again and zero in on that first line: It states...

  Read more
• uncategorized

  wolfCrypt Performance on the Altera Agilex 5

  The Agilex Family and Agilex 5

  Read more
• uncategorized wolssl

  NXP S32K3 Hardware Security Engine (HSE) support using wolfSSL

  wolfSSL now supports hardware-accelerated cryptography on the NXP S32K3 family using the on-chip Hardware Security Engine (HSE). The HSE is a secure coprocessor integrated into NXP’s automotive S32K3 microcontrollers.

  Read more
• uncategorized

  How AI Finds Vulnerabilities in Cryptographic Libraries

  Can AI help uncover security issues that traditional testing, fuzzing, and code review miss?

  Read more
• uncategorized

  PQC Update 2026: Standards, Performance, and Migration Reality

  Post-quantum cryptography is moving from planning to deployment. With NIST standards finalized, CNSA 2.0 guidance emerging, and hybrid cryptography already appearing in production environments, engineering teams are now facing practical decisions around performance, interoperability, certification, and migration strategy.

  Read more
• uncategorized fips wolssl

  Are You Still Stuck on OpenSSL 1.x.y? We Can Help.

  Many organizations still rely on legacy versions of OpenSSL because upgrading certified or long lifecycle products is not always simple. wolfSSL provides lightweight SSL/TLS and cryptography libraries designed for modern embedded and security-focused systems. For compliance-driven environments, wolfCrypt FIPS offers FIPS 140-3 validated cryptography with TLS 1.3 support. If your...

  Read more
• uncategorized wolssl

  wolfSSL Now Runs on CHERI

  Executive Summary

  Read more
• post-quantum uncategorized wolfboot

  wolfBoot for CNSA 2.0 Secure Boot on Zynq UltraScale+ MPSoC

  Executive Summary Problem: Zynq UltraScale+ MPSoC secure boot authenticates the FSBL with RSA-4096 in immutable BootROM. CNSA 2.0 requires post-quantum algorithms for long-term software and firmware verification. RSA-4096 is not quantum-resistant, so the BootROM cannot be the final CNSA 2.0 firmware-authentication answer.

  Read more
• uncategorized wolfboot

  wolfBoot Now Supports the NXP Kinetis KL26 with Post-Quantum LMS Signatures

  wolfSSL is pleased to announce that wolfBoot, our secure bootloader, now ships with support for the NXP Kinetis KL26 family (MKL26Z128), a Cortex-M0+ part running at 48 MHz with 128 KB of flash and 16 KB of SRAM. The port has been validated on the FRDM-KL26Z development board.

  Read more
• uncategorized wolfcose

  wolfCOSE: CBOR and COSE on FIPS-Validated wolfCrypt: Announcing wolfCOSE for wolfCrypt

  We are excited to announce wolfCOSE for wolfCrypt. It is a zero-allocation C library that implements CBOR (RFC 8949) and COSE (RFC 9052/9053). All six COSE message types are supported: Sign1, Sign, Encrypt0, Encrypt, Mac0, and Mac. Multi-signer, multi-recipient, and countersignature variants are included. Cryptographic operations use wolfCrypt under CMVP...

  Read more