Latest Posts

• uncategorized wolftpm

  SPDM Support for the wolfTPM Firmware TPM (fTPM)

  wolfTPM’s firmware TPM (fTPM) now includes an SPDM responder in fwtpm_server, adding an authenticated, encrypted transport between a host and the software TPM 2.0. It supports both TCG certificate mode and DMTF DSP0274 pre-shared-key (PSK) mode, and is merged in PR #510.

  Read more
• uncategorized wolfboot wolfhsm

  wolfHSM Now Supports the Infineon AURIX™ TC4xx

  We’re excited to announce that wolfHSM now supports Infineon’s AURIX™ TC4xx. We have wolfHSM running on the TC4xx, and an initial release is coming soon.

  Read more
• uncategorized wolssl

  wolfSSL support for ZFS

  OpenZFS

  Read more
• uncategorized wolssl

  DTLS 1.3 in the Linux Kernel: Is There Demand?

  We’re building a kernel-native DTLS 1.3 stack — the full wolfSSL handshake and record layer running entirely in Linux kernel context, with no userspace daemon. Before we commit to productizing it, we want to know who needs it.

  Read more
• post-quantum uncategorized

  wolfCrypt Is Quantum-Safe and has a FIPS 140-3 CAVP cert!

  We’re proud to announce that wolfCrypt Post Quantum has officially received CAVP validation from NIST, listed under certificate #A8437. This validation covers the CNSA 2.0 compatible algorithm library contained within the wolfSSL TLS bundle (v7.0.0), and is a critical milestone on the path to a full FIPS 140-3 module validation...

  Read more
• uncategorized wolftpm

  wolfTPM fTPM 2.0 for AMD/Xilinx UltraScale+ MPSoC -- Space and Safety-Critical Ready

  wolfTPM’s firmware TPM (fTPM) is a pure-software, TPM 2.0-compliant module that runs on any 32-bit or larger MCU or co-processor. No discrete TPM chip required. No I2C/SPI bus to manage. Same TPM2_* API on the application side as a hardware TPM, but the TPM logic is yours to place, isolate,...

  Read more
• post-quantum uncategorized wolfssh

  wolfSSH Continues on the Post-Quantum Hybrid Key Exchange Journey

  Go checkout the master branch of wolfSSH. Two new hybrid KEX methods have been added. Both are defined in draft-ietf-sshm-mlkem-hybrid-kex:

  Read more
• uncategorized wolfguard

  wolfCrypt FIPS 140-3 for WireGuard and Kernel Mode Applications

  FIPS 140-3 Kernel Crypto: libwolfssl.ko delivers a FIPS 140-3 compliant cryptographic stack for the Linux kernel, using the same validated wolfCrypt implementations as the user-space library.

  Read more
• uncategorized wolfboot

  wolfBoot Now Supports the STM32G4

  wolfBoot, the secure bootloader from wolfSSL, has a new target: ST’s STM32G4 family of mixed-signal Cortex-M4F microcontrollers. The port has been validated on the NUCLEO-G491RE board (STM32G491RET6: 512 KB flash, 96 KB SRAM, 170 MHz).

  Read more
• uncategorized

  wolfGuard: FIPS-Compliant WireGuard VPN

  WireGuard has become the gold standard for modern VPN deployments due to its simplicity and speed. However, regulated environments have historically faced a frustrating trade-off between compliance and simplicity, leaving teams stuck with heavy, complex legacy solutions.

  Read more